[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2100: passphrase-encrypt the aliases file

[Tahoe-LAFS]

#2100: passphrase-encrypt the aliases file
--------------------------+------------------------------------------------
     Reporter:  daira     |      Owner:  dawuud
         Type:            |     Status:  new
  enhancement             |  Milestone:  undecided
     Priority:  normal    |    Version:  1.10.0
    Component:  code-     |   Keywords:  aliases security capleak usability
  frontend-cli            |
   Resolution:            |
Launchpad Bug:            |
--------------------------+------------------------------------------------

Comment (by dawuud):

 a rough sketch of the cryptos here combining scrypt and an hmac
 construction with aes:
 https://github.com/david415/tahoe-lafs/tree/2100.encrypt-aliases-file.0

 though i think it's the wrong aes mode; shouldn't it be a stream cipher so
 that the input can be any length? you can see my unit tests fail because
 the plaintext length is not a multiple of 16. wtf.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2100#comment:7>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage