[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2783: remove key-generator

Tahoe-LAFS trac at tahoe-lafs.org
Thu Apr 28 05:59:06 UTC 2016


#2783: remove key-generator
----------------------------+---------------------------
 Reporter:  warner          |          Owner:
     Type:  task            |         Status:  new
 Priority:  normal          |      Milestone:  undecided
Component:  code-nodeadmin  |        Version:  1.11.0
 Keywords:                  |  Launchpad Bug:
----------------------------+---------------------------
 Hey, would anybody object if I ripped out the key-generator?

 This is a standalone process that does nothing but create RSA keypairs for
 people who set `key_generator.furl=` in their tahoe.cfg . It creates them
 in the background so mutable-file creation doesn't need to wait. We built
 this back in the !AllMyData days because we were worried about how long
 clients would block while creating keys.

 I argued against removing it in #542 (in 2008), but I've changed my mind
 since then. I'm no longer really comfortable with users (even !AllMyData-
 style customers) getting their keys from anywhere other than their own
 computers (I shouldn't have been comfortable with it back then either,
 really). Also it's one more daemon that needs a `--location` argument
 (#2773) that I could avoid spending time updating.

 The speed used to bother me too, but on my home workstation (a 2012 Mac,
 2.6GHz i7) the 2048-bit RSA key generation takes 80-90 milliseconds per
 key. Not great, but not a big deal.

 OTOH, on the latest Raspberry Pi (v3 model B, 1.2GHz ARMv8), it takes
 about 1.1 seconds (per key). That's a drag, and I'm still looking forward
 to super-fast !Ed25519-based mutable files, but I don't think there's
 enough demand for an external key-generator to let the RPi speed influence
 our decision.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2783>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list