New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Improve security #6

Open

gregtatcam opened this issue Mar 21, 2015 · 0 comments

Owner

gregtatcam commented Mar 21, 2015

always add non-randomized padding; pad bytes indicate the size, i.e. 1 byte pad - 01, 2 byte pad - 0202, etc
PRG initialization should be randomized
IV and key should be randomized
check RSA encryption is correct (direct use of pub/priv key) (see cryptography I TDF)
append,fetch,search are vulnerable to time attack

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment