[messaging] Secure OpenPGP Key Pair Synchronization via IMAP (RFC)
David Leon Gil
coruus at gmail.com
Wed Apr 8 08:06:01 PDT 2015
Quite nice. I'd be inclined to support something like it. Strongly suggest,
however, that you specify either
- (1) some variant of Scrypt
- (2) one of the PHC R2 competitors Lyra2 or Catena.
If (1), I'd suggest Scrypt(hash=HChaCha20, kdf=Shake255)
I'll -- in the next couple of weeks -- be making available a PNaCl
implementation of this. It can also be implemented efficiently in JS,
though the only published correct implementation of Shake I know of
compiles coruus/keccak-tiny via Emscripten...
If (2), I'd suggest Lyra2(BlaCAL): it further increases hardware costs
(multipliers have a large gate count).
On Wed, Apr 8, 2015 at 5:38 AM Tankred Hase <tankred at whiteout.io> wrote:
> Hi there,
> we've updated our private key synchronization protocol. The new
> version was developed together with Cure53 and it's much simpler than
> the old protocol:
> The Enigmail developers have also expressed interest, so we would be
> open to standardize it as an RFC if enough vendors back it.
> Thanks for any feedback.
> Kind regards,
> Whiteout Networks GmbH c/o Werk1
> Grafinger Str. 6
> D-81671 München
> Geschäftsführer: Oliver Gajek
> RG München HRB 204479
> Messaging mailing list
> Messaging at moderncrypto.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Messaging