search

dominictarr / private-stream

MIT License
9 stars 1 forks source link

IMPORTANT learn about DH and AES key strengths #1

Closed dominictarr closed 9 years ago

dominictarr commented 9 years ago

it's VITAL to use a DH exchange that is strong enough that it doesn't weaken the AES stream. I don't know how to choose that, and it's likely that the defaults I have choosen are not very good.

Or maybe I should just make the default the strongest setting and then if anyone changes they clearly have done so at their own risk...

dominictarr commented 9 years ago

okay http://www.rfc-editor.org/rfc/rfc2412.txt and cbc mode is cipher block chaining. that means that each block depends on the previous, preventing replay attacks.