[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Monotone-devel] monotone 0.7 test report
From: |
graydon hoare |
Subject: |
Re: [Monotone-devel] monotone 0.7 test report |
Date: |
12 Nov 2003 10:39:07 -0500 |
User-agent: |
Gnus/5.09 (Gnus v5.9.0) Emacs/21.2 |
Tom Tromey <address@hidden> writes:
> I suppose one fix would be to internally turn an empty passphrase into
> a single space, or something like that. What do you think of this
> approach? Or would you rather I modify cryptopp?
hm. well, since the implication is "no security", why not just lie
about doing the arc4 transform, and cast the byte buffer from
arc4<rsa_priv_key> to rsa_priv_key, when the arc4 phrase length is 0?
would that work? maybe it's also worth doing W(F("empty passphrase"))
or something when this happens.
-graydon