Quite nice. I'd be inclined to support something like it. Strongly suggest, however, that you specify either - (1) some variant of Scrypt - (2) one of the PHC R2 competitors Lyra2 or Catena. If (1), I'd suggest Scrypt(hash=HChaCha20, kdf=Shake255) I'll -- in the next couple of weeks -- be making available a PNaCl implementation of this. It can also be implemented efficiently in JS, though the only published correct implementation of Shake I know of compiles coruus/keccak-tiny via Emscripten... If (2), I'd suggest Lyra2(BlaCAL): it further increases hardware costs (multipliers have a large gate count). - David<div class="gmail_quote">On Wed, Apr 8, 2015 at 5:38 AM Tankred Hase <<a href="mailto:tankred@whiteout.io" target="_blank">tankred@whiteout.io</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi there, we've updated our private key synchronization protocol. The new version was developed together with Cure53 and it's much simpler than the old protocol: <a href="https://blog.whiteout.io/2015/04/08/secure-pgp-key-sync-a-proposal-contd/" target="_blank">https://blog.whiteout.io/2015/04/08/secure-pgp-key-sync-a-proposal-contd/</a> The Enigmail developers have also expressed interest, so we would be open to standardize it as an RFC if enough vendors back it. Thanks for any feedback. Kind regards, Tankred -- Whiteout Networks GmbH c/o Werk1 Grafinger Str. 6 D-81671 München Geschäftsführer: Oliver Gajek RG München HRB 204479 _______________________________________________ Messaging mailing list <a href="mailto:Messaging@moderncrypto.org" target="_blank">Messaging@moderncrypto.org</a> <a href="https://moderncrypto.org/mailman/listinfo/messaging" target="_blank">https://moderncrypto.org/mailman/listinfo/messaging</a> </blockquote></div>