6 ms·

For a start, it's not authenticating ciphertexts: it uses plain hybrid RSA-AES-CFB

• kentonv 11y ago
  To be fair, most full-disk encryption schemes do not authenticate.
  • xrcltr 11y ago
    This is not disk encryption. This is file encryption.
    • StavrosK 11y ago
      It looks like the file is replaced every write, too, which removes most of the hard use cases. It really seems to me that he could just use PyNaCl to encrypt the files and not have to bother with all the custom crypto. I don't know what the intentions and tradeoffs are, though, so I can't be sure.
    • kentonv 11y ago
      Yeah, good point. You could make similar threat-model arguments as are made about FDE, but that's not really a good excuse when authentication would be technically easy in this case.