4 ms·

Great project, but can the devs comment on https://lists.torproject.org/pipermail/tor-dev/2014-December/007999.html https://lists.torproject.org/pipermail/tor-d

• amenhotep 2y ago
  ECB and random.randint, wow. I'm not sure any dev comment could redeem crypto sins like that in such a project.
  • tribler 2y ago
    Deadly mistakes from 2014. Full redesign and new Rust code.
• simcop2387 2y ago
  Looks like there was a discussion back then on the github issues, https://github.com/Tribler/tribler/issues/1066 https://github.com/Tribler/tribler/issues/1066 EDIT: Had a chance to look through it now, looks like they addressed all the concerns back by 2015 i.e. 1. Replacing the custom crypto code with more standard libraries (looks like they settled on NACL/libsodium's implementations). 2. Switched to AES-GCM and then later ChaChaPoly 3. Fixed up the tor protocol issues too. Probably more but there's a lot going on.
• jazzyjackson 2y ago
  Are you suggesting the subject line is inappropriate? I just thought spook meant spy (probably the only audience to whom strong encryption and anonymity actually matter) I guess there's an older more offensive meaning.