5 ms·

Thats an interesting concept, I wonder if Russia and China have their own standards/protocols to use? I guess we could get the same effect by encrypting using

• conductor 13y ago
  OpenSSL supports these Russian GOST standards: * md_gost94 message digest algorithm * gost89 symmetric encryption algorithm with 256 bit key * gost94 public key algorithm with 1024 bit public key * gost94cp public key algorithm with 1024 bit public key (CP mode1) * gost2001 public key algorithm based on elliptic curves with 512 bit public key * gost2001cp public key algorithm based on elliptic curves with 512 bit public key (CP mode1)
  • antocv 13y ago
    Should I make a simple script to use gnutls to encrypt a file with AES then openssl using gost89, then 3des ?
    • rumcajz 13y ago
      Why not? Seems like fun.
• conductor 13y ago
  > I guess we could get the same effect by encrypting using 3DES, then AES, then blowfish, twofish and then RC4. TrueCrypt supports cascaded encryption in XTS mode, see [0]. AES-Twofish-Serpent, combined with a decent password and Whirlpool hash algorithm (it is used for HMAC and for mixing the RNG) should be pretty secure, IMO. Anyhow, we don't have plenty of really good and checked publicly available alternatives for symmetric encryption. [0] http://www.truecrypt.org/docs/cascades http://www.truecrypt.org/docs/cascades
• CWuestefeld 13y ago
  Counterintuitively, sequentially applying additional crypto doesn't necessarily improve security; in theory, it may actually damage it.
  • rumcajz 13y ago
    Any pointer to explanation of the phenomenon?
  • endeavor 13y ago
    If the keys used for each cipher are independent it should not weaken security. See section 15.7 of Applied Cryptography (http://www.cse.iitk.ac.in/users/anuag/crypto.pdf http://www.cse.iitk.ac.in/users/anuag/crypto.pdf).
• bdamm 13y ago
  None of this helps you if the random number generated that created your key is compromised.
  • wahsd 13y ago
    Even if you use different random number generators?
    • bdamm 13y ago
      I suppose you could, yes. If you wanted to make all this happen algorithmically you'd end up with a super-sized key that was a concatenation of all the keys you generated for each of the sub-algorithms, where the sub-algorithms would each consume their respective key chunks.
      • gizmo686 13y ago
        You don't have to concatenate your keys, simply XORing the random bitstreams together works fine (my intuition says that XORing them would provide a stronger result).
    • deleted 13y ago
      [deleted]