mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

use different parts of cipher for hmac and gpg

Browse source 
Per bugs/S3_bucket_uses_the_same_key_for_encryption_and_hashing

It may be paranoid to worry about the cipher being recovered
from hmac keys, but yes.. let's be paranoid.
This commit is contained in:
Joey Hess 2011-04-17 01:34:28 -04:00
parent 50cfcdf54b
commit 4d136e1ef5
2 changed files with 29 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

4
doc/bugs/S3_bucket_uses_the_same_key_for_encryption_and_hashing.mdwn
View file

@ -4,5 +4,5 @@ Also, ttbomk, HMAC needs two keys, not one. Are you re-using the same key twice?
Compability for old buckets and support for different ones can be maintained by introducing a new option and simply copying over the encryption key's identifier into this new option should it be missing.
> See [[design/encryption]]. I don't think this bug needs to be kept
> open. [[done]] --[[Joey]]
> Bug was filed prematurely, but was a good bit of paranoia, and gpg and
> hmac are given different secret keys [[done]] --[[Joey]]