[tahoe-dev] AES-256 is looking worse

Jan-Benedict Glaw jbglaw at lug-owl.de
Fri Jul 31 09:54:03 PDT 2009


On Fri, 2009-07-31 10:21:06 -0600, Zooko O'Whielacronx <zookog at gmail.com> wrote:
> Folks:
> 
> I've already been investigating for a long time the possibility of
> switching from AES-256 to XSalsa20 for future versions of Tahoe-LAFS.
> Today's announcement that AES-256 is weaker than we previously thought
> makes the issue more urgent.  Here's a blog entry I just posted about
> this (also appended):
> 
> http://testgrid.allmydata.org:3567/uri/URI:DIR2-RO:j74uhg25nwdpjpacl6rkat2yhm:kav7ijeft5h7r7rxdp5bgtlt3viv32yabqajkrdykozia5544jqa/wiki.html

In case of fire, maybe it would be feasible to extend the a repair
with a writecap to do additional re-crypting?

Another question is: Will a switch be a real switch? Or just allow
an additional crypto alg?

MfG, JBG

-- 
      Jan-Benedict Glaw      jbglaw at lug-owl.de              +49-172-7608481
Signature of:  The course of history shows that as a government grows, liberty
the second  : decreases."  (Thomas Jefferson)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://allmydata.org/pipermail/tahoe-dev/attachments/20090731/2125d4f1/attachment.pgp 


More information about the tahoe-dev mailing list