Meshbird – Distributed private networking

Re:Meshbird – Distributed private networking by rickette on Monday February 13, 2017 @05:42PM (#13639515)

Just took a quick look at the crypto implementation. It uses AES-256 in CBC mode but..... without an authentication tag (HMAC).

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by mikeycgto on Monday February 13, 2017 @08:44PM (#13640535)

Also known as "The Cryptographic Doom Principle".

https://moxie.org/blog/the-cryptographic-doom-principle/

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by Cyphase on Tuesday February 14, 2017 @12:33AM (#13641408)

I hadn't come across that post that I can remember; a very nice explanation by Moxie. Thanks.

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by beefsack on Monday February 13, 2017 @09:51PM (#13640790)

There is an official (albeit experimental) NaCl implementation for Go which would probably have both been simpler and stronger to use: https://godoc.org/golang.org/x/crypto/nacl

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by miovoid on Monday February 13, 2017 @10:31PM (#13640934)

We are working on AES-GCM encryption.

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by tptacek on Monday February 13, 2017 @10:56PM (#13641019)

Why did you use CBC? It's actually harder than crypto/cipher.AEAD, and what you're doing now seems insecure.

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by miovoid on Monday February 13, 2017 @11:17PM (#13641100)

Because it is easy to use to separate UDP datagrams.

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by problems on Monday February 13, 2017 @11:25PM (#13641133)

In what way? Are you relying on CBC padding to determine packet size?

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by tptacek on Tuesday February 14, 2017 @10:28AM (#13644103)

I don't think that's the case.

[ Parent | on HN ]