mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Added a comment

Browse source
This commit is contained in:
http://phil.0x539.de/ 2013-03-04 07:36:56 +00:00 • committed by admin
parent 1df34ef9a0
commit d343992fce
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
doc/bugs/encryption_key_is_surprising/comment_2_5b7e6bb36c3333dfd71808e8b4544746._comment Normal file
View file

@ -0,0 +1,8 @@
[[!comment format=mdwn
username="http://phil.0x539.de/"
nickname="Philipp Kern"
subject="comment 2"
date="2013-03-04T07:36:55Z"
content="""
GPG also reduces the key material to the size of a SHA1 hash (because we're using the default option for s2k-digest-algo) to generate the symmetric key used with CAST5. So I wonder a bit why we bother with 512 bytes in the first place. Also they come from urandom (even on Linux), despite being generated once per remote. So maybe the strongness of the weakest link should be written down somewhere.
"""]]