monotone-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Monotone-devel] monotone 0.7 test report


From: graydon hoare
Subject: Re: [Monotone-devel] monotone 0.7 test report
Date: 12 Nov 2003 10:39:07 -0500
User-agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.2

Tom Tromey <address@hidden> writes:

> I suppose one fix would be to internally turn an empty passphrase into
> a single space, or something like that.  What do you think of this
> approach?  Or would you rather I modify cryptopp?

hm. well, since the implication is "no security", why not just lie
about doing the arc4 transform, and cast the byte buffer from
arc4<rsa_priv_key> to rsa_priv_key, when the arc4 phrase length is 0?

would that work? maybe it's also worth doing W(F("empty passphrase"))
or something when this happens.

-graydon





reply via email to

[Prev in Thread] Current Thread [Next in Thread]