f.bain icon indicating copy to clipboard operation
f.bain copied to clipboard

Published 20 hours ago • verified publisher icon bain3

Change IV generation to match NIST spec

Open bain3 opened this issue 3 years ago • 3 comments

Currently IVs are encrypted with the file for redundant security. According to the NIST Special Publication 800-38D they do not need to be secret, and only require to be unique, not cryptographically random. This could allow blocks to be decrypted and handled in parallel.

bain3 avatar Jan 28 '22 21:01 bain3

This is a breaking change and would require to have to keep the old scheme for a while for backwards compatibility.

bain3 avatar Jan 28 '22 21:01 bain3

hi, when will" encrypt(upload) & decrypt(download) be parallel" feature be available?

practicingman avatar Mar 30 '22 04:03 practicingman

I'm not sure. It is just a new possibility that opens up. I think it will first be implemented in the native client because I feel it could get more use there, since it will probably be run on servers and desktops. Right now it is not an important feature.

bain3 avatar Apr 07 '22 20:04 bain3