Changes between Version 25 and Version 26 of Crypto/CurrentSpecs

Timestamp:

Jan 23, 2013 8:49:06 PM (8 years ago)

Author:

DISABLED

Comment:

—

Crypto/CurrentSpecs

@@ -3 +3 @@
 == Currently used ciphers ==
 
-|| '''Cipher''' || '''Used lengths''' || '''Perceived vulnerability''' || '''Comments'''
-|| !ElGamal || 2048 ||
-|| AES || 256 bit keys, 128 bit blocks, CBC mode || ~None? ||  A good choice due to broad hardware support
-|| DSA || 1024 || 
-|| SHA256 || 256 ||
+|| '''Cipher''' || '''Used lengths''' || '''Perceived vulnerability''' || '''Comments'''||
+|| !ElGamal || 2048 || || ||
+|| AES || 256 bit keys, 128 bit blocks, CBC mode || None ||  A good choice due to common support for hardware acceleration ||
+|| DSA || 1024 || || ||
+|| SHA256 || 256 || || Slow compared to SHA-3 ||
 
 == Cipher usage ==
 
-|| '''Router aspect''' || '''Cipher used''' || '''Security timescale''' ||'''Usage details''' || '''Comments'''
-|| NTCP handshake || DSA || ???
-|| SSU handshake || DSA || ??? ||
-|| !RouterInfo signing || DSA || ??? ||
-|| [wiki:Crypto/leaseset_signing LeaseSet signing] || DSA || Years ||
-|| !LeaseSet revocation (unused) || DSA || ??? ||
-|| I2CP Session Config signing || DSA || ??? ||
-|| Datagram signing || DSA || ??? ||
-|| Streaming message signing || DSA || ??? ||
-|| SUD signing || DSA || Years and years ||
+|| '''Router aspect''' || '''Cipher used''' || '''Security timescale''' ||'''Usage details''' || '''Comments''' ||
+|| NTCP handshake || DSA || ???|| || ||
+|| SSU handshake || DSA || ??? || || ||
+|| !RouterInfo signing || DSA || ??? || || ||
+|| [wiki:Crypto/leaseset_signing LeaseSet signing] || DSA || Years || || ||
+|| !LeaseSet revocation (unused) || DSA || ??? || || ||
+|| I2CP Session Config signing || DSA || ??? || || ||
+|| Datagram signing || DSA || ??? || || ||
+|| Streaming message signing || DSA || ??? || || ||
+|| SUD signing || DSA || Years and years || || ||
 
 == Potential new ciphers ==
 
 === Asymmetric ciphers ===
-|| '''Cipher''' || '''Suggested lengths''' || '''Implementability''' || '''Comments'''
-|| [wiki:Crypto/ecdsa EC-DSA] || || Supported in Java7 || Already used in I2PBote (via bouncycastle?) ||
+|| '''Cipher''' || '''Suggested lengths''' || '''Implementability''' || '''Comments''' ||
+|| [wiki:Crypto/ecdsa EC-DSA] || 160 Bits|| Supported in Java7 || Already used in I2PBote (via bouncycastle?) ||
 || RSA || || || Probably not a good security/performance tradeoff.  ||
 
 
 === Symmetric ciphers ===
-|| '''Cipher''' || '''Suggested lengths''' || '''Implementability''' || '''Comments'''
+|| '''Cipher''' || '''Suggested lengths''' || '''Implementability''' || '''Comments''' ||
 || Twofish || 256 Bits|| || 256-Bit twofish is faster than 256-bit Rijndael on the same hardware ||
 
@@ -42 +42 @@
 === HMAC (hash-based message authentication code) ===
 || '''Cipher''' || '''Implementability''' || '''Comments'''
-|| HMAC_SHA256? ||
+|| HMAC_SHA256? || || ||