Meshbird – Distributed private networking

Re:Meshbird – Distributed private networking by miovoid on Monday February 13, 2017 @10:20PM (#13640899)

Hey! I'm MeshBird's author. Feel free to ask a questions.

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by chetanahuja on Monday February 13, 2017 @10:23PM (#13640908)

@rickette posted this:

"Just took a quick look at the crypto implementation. It uses AES-256 in CBC mode but..... without an authentication tag (HMAC)."

Any response?

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by miovoid on Monday February 13, 2017 @10:25PM (#13640912)

Good point. We are going to implement AES-GCM encryption based data transfer. Why AES-GCM to solve HMAC missing? Because Go have low-level asm optimisations. This is open way to full utilization of 10G/40G networks.

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by wtbob on Monday February 13, 2017 @11:01PM (#13641037)

Seriously, I'd advise that you implement an HMAC today, and implement GCM tomorrow — using raw CTR mode really is that dangerous. And make sure that you never ever ever reuse IVs, ever.

This sort of thing is incredibly dangerous. Props to you for coming up with a great UX, but crypto is very, very difficult to get right.

[ Parent | on HN ]

Re:Meshbird – Distributed private networking by qrpike on Tuesday February 14, 2017 @07:33AM (#13643057)

Keep up the good work! Much appreciated

[ Parent | on HN ]