merlon
merlon copied to clipboard
Distributable encryption is unneeded
The current distributable format is a tar archive with AES-256-CBC encryption, SHA-512 as the message digest algorithm, and PBKDF2 for key derivation. My thinking is that we don't really need any encryption on distributables, and can just use an archive format like zip instead