diff options
Diffstat (limited to 'doc/bugs/encryption_key_is_surprising/comment_2_5b7e6bb36c3333dfd71808e8b4544746._comment')
| -rw-r--r-- | doc/bugs/encryption_key_is_surprising/comment_2_5b7e6bb36c3333dfd71808e8b4544746._comment | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/doc/bugs/encryption_key_is_surprising/comment_2_5b7e6bb36c3333dfd71808e8b4544746._comment b/doc/bugs/encryption_key_is_surprising/comment_2_5b7e6bb36c3333dfd71808e8b4544746._comment deleted file mode 100644 index 24f8452c3..000000000 --- a/doc/bugs/encryption_key_is_surprising/comment_2_5b7e6bb36c3333dfd71808e8b4544746._comment +++ /dev/null @@ -1,8 +0,0 @@ -[[!comment format=mdwn - username="http://phil.0x539.de/" - nickname="Philipp Kern" - subject="comment 2" - date="2013-03-04T07:36:55Z" - content=""" -GPG also reduces the key material to the size of a SHA1 hash (because we're using the default option for s2k-digest-algo) to generate the symmetric key used with CAST5. So I wonder a bit why we bother with 512 bytes in the first place. Also they come from urandom (even on Linux), despite being generated once per remote. So maybe the strongness of the weakest link should be written down somewhere. -"""]] |