30 ms·
Ansible is relying on SSH for security and does not use any homebrew crypto or protocols by default.
by lima 6y ago
Ansible is relying on SSH for security and does not use any homebrew crypto or protocols by default.
- shockinglytrue 6y agoansible-vault is homebrew crypto
- VWWHFSfQ 6y agoit uses the standard cryptography or pycrypto backends as everything else
- jaden 6y agoI don't understand this claim. ansible-vault uses AES256 which is anything but homebrew.
- brians 6y agoSalt uses AES too. The problem is it puts together standard primitives in homebrew protocols. Cryptographic protocol design is as likely to mess your system up as cryptographic primitive design.
- shockinglytrue 6y agoThis is why like me, you're not a cryptographer. AES256 is a cipher, its one component of a cryptosystem. Analysing cryptosystems is a complex area that does not involve vetting software for buzzwords. I can take AES256 and make it output the image here: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Electronic_codebook_(ECB) https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation... That's not supposed to happen. The part where homebrew diverges from cryptography is that the former involves engineers like us connecting buzzwords together to produce images like the Wikipedia article, the latter involves complex math and rigorous peer review.
- VWWHFSfQ 6y agoI think you're just trolling
- jlgaddis 6y ago> homebrew crypto AES-256?
- SEJeff 6y agohttps://linux.die.net/man/3/ansible.fireball https://linux.die.net/man/3/ansible.fireball It definitely has them however.
- willjp 6y agoYou can use salt over SSH, but it is not the default.