search

calvinmetcalf / crypto-pouch

plugin for encrypted pouchdb/couchdb databases
MIT License
243 stars 43 forks source link

README is still a bit confusing #3

Closed nolanlawson closed 10 years ago

nolanlawson commented 10 years ago

So I had a few questions after reading through your readme:

Chacha20-Poly1305

can't find a wikipedia article or whitepaper about this

If you change the name of a document,

I don't understand what this means

run on your password with that as salt for 1000 iterations to generate a 32 byte (256 bit) key

code samples would be really helpful here, I also don't understand why I would want to do this.

I also didn't understand anything about the Diffie Hellman part. If it's important for the average end-user to know, then could you rewrite it in an "explain like I'm 5" kind of way? If not, let's just keep it buried at the bottom of the README where only experts will read it.

Great work on this, by the way; this sounds like very futuristic stuff.

calvinmetcalf commented 10 years ago

Chacha20-Poly1305 is defined in this spec also see this

The encryption is authenticated meaning if somebody modifies it instead of getting mangled output it will throw a validation error before decrypting it, this document id is also included in authentication so if you had a document named things_i_hate, somebody couldn't change the name to things_i_love without re-encrypting it.

will update the readme with this as more

calvinmetcalf commented 10 years ago

check the readme now

nolanlawson commented 10 years ago

:+1: