4 ms·
I dunno about windows but minisign is on Mac and Linux, yes. As for 25 years to break it, well, go look at CVEs for GnuPG. There have been many.
by na85 5y ago
I dunno about windows but minisign is on Mac and Linux, yes.
As for 25 years to break it, well, go look at CVEs for GnuPG. There have been many.
- forgotmypw17 5y agoThe algorithms still stand 25 years later. Is it also available for iOS and Android? FreeBSD? Are there libraries for Perl and PHP?
- na85 5y ago> The algorithms still stand 25 years later. They don't, though.
- forgotmypw17 5y agoBoth RSA and ECC still stand strong, AFAIK. What are you saying here?
- na85 5y agoI was referring to CAST5
- forgotmypw17 5y agoBased on my reading, there are no serious known issues with CAST5, with a minor issue being its small block size. [1] Is there anything else? [1] https://crypto.stackexchange.com/questions/24045/is-cast5-still-a-secure-algorithm-to-use https://crypto.stackexchange.com/questions/24045/is-cast5-st...
- upofadown 5y agoThis might represent a common misconception about PGP. The algorithm preference information is embedded in the PGP identity. It is signed by the certification/signing key. So a downgrade attack would involve breaking the cryptogrphy used for the certification/signing key. CAST5 is not used for certification or signing and has been nowhere close to the start of the preferences for a really long time. Having CAST5 as some sort of last ditch backward compatibility thing is no more of a weakness than the fact that the computer I am using to write this has an MD5 command. Having said that, what is wrong with CAST5 for PGP application? What does it have to do with a system that is all about signing things?