Re: Variable Key Stretching for v3
"Frank Pilhofer" <[email protected]>
| Newsgroups | gmane.comp.security.passwordsafe.devel |
|---|---|
| Message-ID | <[email protected]> |
On Mon, 20 Feb 2006 17:11:10 -0500, <[email protected]> wrote: > > The only way I can think of to deal with "if there will be something > else, such > as a weakness in Twofish or SHA-256" is to allow more than one hash and > encryption algorithm - i.e. add 2 more 1-byte fields: > A change to the encryption algorithm might also require other changes in the file format. So, if the time comes to retire SHA-256 and Twofish, it might be easier to just bump the file version number, as indicated by the (currently) "PWS3" magic header. Just IMHO, Frank -- Frank Pilhofer, [email protected] ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642