mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Added a comment

Browse source
This commit is contained in:
http://phil.0x539.de/ 2013-03-05 07:17:08 +00:00 • committed by admin
parent 974d075108
commit 58977c73c7
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
doc/bugs/encryption_key_is_surprising/comment_4_8ec86b8c35bce15337a143e275961cd5._comment Normal file
View file

@ -0,0 +1,8 @@
[[!comment format=mdwn
username="http://phil.0x539.de/"
nickname="Philipp Kern"
subject="comment 4"
date="2013-03-05T07:17:08Z"
content="""
You (presumably) hand over 320 bytes of entropy to GPG, but you don't control the encryption key directly. GPG assumes that what it's given as a symmetric key is not at all random. Hence, with the default options (for OpenPGP interop, apparently) it will derive a 128 bit from the given passphrase. For this it uses (again, by default) salted SHA1 on the whole passphrase. So the strength of the cipher is 128 bit CAST5 or an attack on salted SHA1 with a mostly known input length (but this does seem large).
"""]]