encryption design document

This commit is contained in:
Joey Hess 2011-04-03 14:34:00 -04:00
parent ee313074ed
commit 83acc9ba52
4 changed files with 116 additions and 16 deletions

View file

@ -3,3 +3,6 @@ While using HMAC instead of "plain" hash functions is inherently more secure, it
Also, ttbomk, HMAC needs two keys, not one. Are you re-using the same key twice?
Compability for old buckets and support for different ones can be maintained by introducing a new option and simply copying over the encryption key's identifier into this new option should it be missing.
> See [[design/encryption]]. I don't think this bug needs to be kept
> open. [[done]] --[[Joey]]