Better Security Features

syndicate-storage / syndicate

Internet-scale software-defined storage system

Apache License 2.0

56 stars 10 forks source link

Closed jcnelson closed 10 years ago

jcnelson commented 11 years ago

Sign the hash of the message, not the message itself.
Use OAEP instead of PKCS 1.5 when signing messages.
Have the UG opt to use ephemeral Diffie-Hellman symmetric keys for perfect forward security when contacting the MS over SSL/TLS.

jcnelson commented 10 years ago

Note: using PKCS PSS instead of OAEP, since we're only signing data.