security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-03 22:56:33 +02:00
Code Activity

gpg: default to AES-256.

Browse source 
* g10/main.h (DEFAULT_CIPHER_ALGO): Prefer AES256 by default.

--

It's 2017, and pretty much everyone has AES-256 available.  Symmetric
crypto is also rarely the bottleneck (asymmetric crypto is much more
expensive).  AES-256 provides some level of protection against
large-scale decryption efforts, and longer key lengths provide a hedge
against unforseen cryptanalysis.

Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
(cherry picked from commit 73ff075204)

Gbp-Pq: Topic from-master
Gbp-Pq: Name gpg-default-to-AES-256.patch
This commit is contained in:
Daniel Kahn Gillmor 2017-09-07 19:04:00 -04:00
parent 9420c525db
commit f7c7872853
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
g10/main.h
View file

@ -31,7 +31,9 @@
(i.e. uncompressed) rather than 1 (zip). However, the real world (i.e. uncompressed) rather than 1 (zip). However, the real world
issues of speed and size come into play here. */ issues of speed and size come into play here. */
#if GPG_USE_AES128 #if GPG_USE_AES256
# define DEFAULT_CIPHER_ALGO CIPHER_ALGO_AES256
#elif GPG_USE_AES128
# define DEFAULT_CIPHER_ALGO CIPHER_ALGO_AES # define DEFAULT_CIPHER_ALGO CIPHER_ALGO_AES
#elif GPG_USE_CAST5 #elif GPG_USE_CAST5
# define DEFAULT_CIPHER_ALGO CIPHER_ALGO_CAST5 # define DEFAULT_CIPHER_ALGO CIPHER_ALGO_CAST5