3 ms·
Show HN: crype – diffable/syncable encryption for files or shell pipes
- higherpurpose 12y agoSHA1 is long past its expiry date. NIST has been recommending to move away from it since 2010, and it outright banned it last year. And when the NSA-influenced NIST recommends something, you know you should be doing it at least 3 years earlier. Someone like NSA or even a drug cartel can pretty easily break it now. This is a 2 year old article: https://www.schneier.com/blog/archives/2012/10/when_will_we_se.html https://www.schneier.com/blog/archives/2012/10/when_will_we_... If you're worried about the performance overhead of SHA2, just use Blake2, which is actually faster than SHA1 and even MD5: https://leastauthority.com/blog/BLAKE2-harder-better-faster-stronger-than-MD5.html https://leastauthority.com/blog/BLAKE2-harder-better-faster-... http://bench.cr.yp.to/results-sha3.html#amd64-titan0 http://bench.cr.yp.to/results-sha3.html#amd64-titan0 https://blake2.net/ https://blake2.net/
- mappu 12y agoKey derivation is SHA1-PBKDF2 not just SHA1, but you're right. I'll change to something more reputable in the next version.