Another possible private key protection method

[Werner Koch]

On Thu, 26 May 2016 09:11, gniibe at fsij.org said:

> It's something like the one-time pad system and a variant of Vernam
> cipher.

Although the system sounds plausible, I would not suggest to use any
ad-hoc methods just to ...

> Benefit for Gnuk is that we won't need to have AES implementation.

... avoid an AES implementation.  I can see the reason why you do not
want AES, but in you may also use another established cipher which
requires less code size and can make use of already implemented hash
algorithms.  Given that the keys to protect are small, what about using
the already implemented X25519 in place of a symmetric cipher?


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
    /* EFH in Erkrath: https://alt-hochdahl.de/haus */