Skip to content
This repository has been archived by the owner on Jun 24, 2022. It is now read-only.

📝 Correction | Unknown encryption curve used by croc #2385

Closed
1 task done
rad1ke opened this issue Jul 21, 2021 · 0 comments · Fixed by privacyguides/privacyguides.org#886 · May be fixed by #2386
Closed
1 task done

📝 Correction | Unknown encryption curve used by croc #2385

rad1ke opened this issue Jul 21, 2021 · 0 comments · Fixed by privacyguides/privacyguides.org#886 · May be fixed by #2386
Labels
📝 correction Correction of content on the website

Comments

@rad1ke
Copy link

rad1ke commented Jul 21, 2021

Description

The default encryption curve that croc uses is called SIEC and is completely unknown amongst cryptographers and there are only a handful of people who researched or mentioned this curve. A general recommendation in the security and cryptography space is to use known, researched and audited encryption curves. These can be curves like the NIST curves which fortunately are supported by croc, but optional. croc's README.md mentions that it is a lesser known curve and provides options to change to other curves. The user should be made aware of the default encryption curve used.

Why I am making the suggestion

Encryption plays a big role for file sharing applications like croc where data can be sent internationally across various networks. It is important to make sure that this data stays encrypted securely.

My connection with the software

I personally have used the software and found it very practical.

  • I will keep the issue up-to-date if something I have said changes or I remember a connection with the software.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
📝 correction Correction of content on the website
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant