[tahoe-lafs-trac-stream] [tahoe-lafs] #1801: are 1024-bit foolscap keys long enough?

tahoe-lafs trac at tahoe-lafs.org
Tue Sep 4 23:47:22 UTC 2012


#1801: are 1024-bit foolscap keys long enough?
-------------------------------+---------------------------
 Reporter:  davidsarah         |          Owner:
     Type:  defect             |         Status:  new
 Priority:  normal             |      Milestone:  undecided
Component:  code-network       |        Version:  1.9.2
 Keywords:  foolscap security  |  Launchpad Bug:
-------------------------------+---------------------------
 > elb: while I'm active here, let me mention something else that bothers
 me ... it appears that the ssl keys used to protect tahoe's foolscap
 transport are rather strictly limited to 1024-bit self-signed keys

 > elb: and that appears to be decided within foolscap

 > elb: it would be kind of nice to be able to use a) longer, and b) signed
 keys

 Note that this doesn't affect Tahoe's confidentiality and integrity
 guarantees for files; it affects things like confidentiality of write
 enablers, which is (only) a denial-of-service issue.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1801>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list