If we use chunks instead of control bytes, then we definitely want to
still keep it as compact as possible, and that means binary.  Don't switch
to FNP chunking.

> give a known-plaintext attack. Since the padding is disguarded it's 
> upto the client to decide what to pad with - but I'd suggest something 
> at least slightly random. 

Thats difficult.  We want documents to collide, so they all must produce
the same padding.  And if they do, then an attacker knows what the padding
will look like.  Almost...

What you can do is just hash the last n real bytes, drop that as padding,
then hash that, drop as padding, etc until you're done.



_______________________________________________
Devl mailing list
Devl at freenetproject.org
http://lists.freenetproject.org/mailman/listinfo/devl

Reply via email to