flakes / mirc_fish_10

"FiSH 10" - a blowfish encryption script for mIRC 7, compatible to previous FiSH scripts and other clients! Come visit us in #fish10 on EFNet!
https://syndicode.org/fish_10/
86 stars 16 forks source link

CFB Mode Support #40

Closed ghost closed 9 years ago

ghost commented 9 years ago

Hello,

is it possible to add to your next version of fish10 , the CFB mode support ?

Thanking you

zer0c0nf

flakes commented 9 years ago

Are there any other clients that support this?

ghost commented 9 years ago

This is the vision of improving safety and it probably will push customers to also improve security against attacks.

It is already very good to have a fish regularly updated , so if it can be even better it will be beneficial to everyone :)

flakes commented 9 years ago

CFB alone does not add any security at all. The weak link is authentication. I may or may not be working on a FiSH-based OTR implementation that would expedite security levels to "NSA-proof if used correctly" - for queries. And since OTR is an established standard, it's also interoperable with other IRC clients. OTR is not currently available for group chats/channels (you may at least use the cbc: key prefix in FiSH 10), but people are working on making a that available as well.