News for hackers. Stuff that matters.

A comment on The default OpenSSH key encryption is worse than plaintext. Parent comment

Re:The default OpenSSH key encryption is worse than plaintext by sneak on Friday August 03, 2018 @04:36PM (#17683410)
The KDF used for password-based symmetric encryption (gpg -c, private keys on disk) in GnuPG is also terrible - but at least it is an iterated KDF of a fast function, as opposed to one-shot. I would happily put up funds for a bounty to fix the default in GnuPG but I don’t know where to post/fund such a thing.
[ Parent | on HN ]
Re:The default OpenSSH key encryption is worse than plaintext by mrrandomguy11 on Friday August 03, 2018 @06:43PM (#17684210)
You would have to change the OpenPGP standard - other implementations would have to follow that.
[ Parent | on HN ]
Re:The default OpenSSH key encryption is worse than plaintext by sneak on Friday August 03, 2018 @09:45PM (#17684930)
The iteration count is serialized into the message.
[ Parent | on HN ]