GOST cryptography – Russian Federation’s cryptographic algorithms

Re:GOST cryptography – Russian Federation’s cryptographic al... by hueving on Sunday October 23, 2016 @07:50AM (#12773131)

>which is the reason you'll find very few soundly designed cryptosystems that do this.

Nearly every secure system I've dealt with (in the military side) encrypted at the network layer (VPN) and they sent encrypted files over that channel.

[ Parent | on HN ]

Re:GOST cryptography – Russian Federation’s cryptographic al... by tptacek on Sunday October 23, 2016 @10:02AM (#12773594)

Yes, because (as I just said), encrypting files mitigates systems problems outside the scope of the secure channel problem. A secure channel doesn't help you if the bag of bits you send down it ends up persisted on an exported, unencrypted filesystem.

That doesn't mean that redundant clientside encryption of files is a sensible feature for a secure channel to have.

[ Parent | on HN ]