I'm working on adding encrypted folder access into iFolder for iPhone
and have been wondering why my blowfish decoding is failing. After
investigating the mono source code, I have discovered that the
blowfish implementation as used by iFolder suffers from a known
implementation error.

See the following notes where the flaw and the fix are presented.

http://www.schneier.com/blowfish-bug.txt

It would be good to see this fixed for future server releases, however
that raises the issue of client compatibility - the client would need
to know which server version it was communicating with.

Is this on the roadmap? Has it already been discussed?

I'm happy to provide additional information if required.

Roger Moffatt
Mindsizzlers LLP
Author of iFolder for iPhone

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
ifolder-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ifolder-devel

Reply via email to