diff options
| author | Joey Hess <joeyh@joeyh.name> | 2016-08-19 12:41:31 -0400 |
|---|---|---|
| committer | Joey Hess <joeyh@joeyh.name> | 2016-08-19 12:41:31 -0400 |
| commit | d3323ab8e9e39bcb0a6493d33efa265073920a7d (patch) | |
| tree | 5366a829047b1637496086fec5744947da21d383 /Encryption.hs | |
| parent | a774bc8d566c55564d008863b3c1be7d03a9fdde (diff) | |
| download | keysafe-d3323ab8e9e39bcb0a6493d33efa265073920a7d.tar.gz | |
comment updates
The keyid used as a salt in the shardIdents does not prevent rainbow table
attacks, since it's often anyKey (""). The obscure name combined with the
username does make rainbow tables unlikely to be useful though.
Diffstat (limited to 'Encryption.hs')
| -rw-r--r-- | Encryption.hs | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Encryption.hs b/Encryption.hs index 649cfed..4a8f5cf 100644 --- a/Encryption.hs +++ b/Encryption.hs @@ -164,7 +164,7 @@ hashToAESKey (ExpensiveHash _ t) = b = B.take (fromIntegral $ Raaz.byteSize (undefined :: AesKey)) $ Raaz.toByteString $ Raaz.sha256 (E.encodeUtf8 t) --- | A bytestring that can be AES enctypted. It includes a checksum, +-- | A bytestring that can be AES encrypted. It includes a checksum, -- and size, and is padded to the objectSize with NULs. -- -- This is a multiple of the AES blocksize, as long as objectSize is, |