{"action":"created","issue":{"url":"https://api.github.com/repos/marcoonroad/hieroglyphs/issues/1","repository_url":"https://api.github.com/repos/marcoonroad/hieroglyphs","labels_url":"https://api.github.com/repos/marcoonroad/hieroglyphs/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/marcoonroad/hieroglyphs/issues/1/comments","events_url":"https://api.github.com/repos/marcoonroad/hieroglyphs/issues/1/events","html_url":"https://github.com/marcoonroad/hieroglyphs/issues/1","id":381931028,"node_id":"MDU6SXNzdWUzODE5MzEwMjg=","number":1,"title":"Wrong Type of Encryption Algorithm","user":{"login":"marcoonroad","id":3820407,"node_id":"MDQ6VXNlcjM4MjA0MDc=","avatar_url":"https://avatars3.githubusercontent.com/u/3820407?v=4","gravatar_id":"","url":"https://api.github.com/users/marcoonroad","html_url":"https://github.com/marcoonroad","followers_url":"https://api.github.com/users/marcoonroad/followers","following_url":"https://api.github.com/users/marcoonroad/following{/other_user}","gists_url":"https://api.github.com/users/marcoonroad/gists{/gist_id}","starred_url":"https://api.github.com/users/marcoonroad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcoonroad/subscriptions","organizations_url":"https://api.github.com/users/marcoonroad/orgs","repos_url":"https://api.github.com/users/marcoonroad/repos","events_url":"https://api.github.com/users/marcoonroad/events{/privacy}","received_events_url":"https://api.github.com/users/marcoonroad/received_events","type":"User","site_admin":false},"labels":[{"id":1120777459,"node_id":"MDU6TGFiZWwxMTIwNzc3NDU5","url":"https://api.github.com/repos/marcoonroad/hieroglyphs/labels/enhancement","name":"enhancement","color":"a2eeef","default":true},{"id":1120777462,"node_id":"MDU6TGFiZWwxMTIwNzc3NDYy","url":"https://api.github.com/repos/marcoonroad/hieroglyphs/labels/invalid","name":"invalid","color":"e4e669","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-11-18T05:39:05Z","updated_at":"2018-11-25T19:12:32Z","closed_at":null,"author_association":"OWNER","body":"It's quite wrong to use ARC4 / Stream Cipher encryption algorithms here. I really don't remember why I had such idea in the first place. Stream ciphers are only good if the following conditions are meet:\r\n- The data has a variable size (imagine streams of video or telephone calls).\r\n- The keys to encrypt are never reused again.\r\n\r\nIn our current state of affairs, we're doing the **opposite** of that. Really. And it's really insecure by doing that, so. **Really**. Our private keys have a fixed-length, first and foremost. We're quite wrong here, and it's annoying for any expert information security engineer to see that. By second, the keys to encrypt and decrypt private keys can be used and reused again, indefinitely, 'cause it's the responsibility of the caller / client of our library to define that. Again, we're quite wrong and this can render the whole Post-Quantum security of this library as flawed even on Classical Machines.\r\n\r\nTherefore, I should figure out Block Cipher algorithms to use here instead. By preference, **strong ones**."},"comment":{"url":"https://api.github.com/repos/marcoonroad/hieroglyphs/issues/comments/441464469","html_url":"https://github.com/marcoonroad/hieroglyphs/issues/1#issuecomment-441464469","issue_url":"https://api.github.com/repos/marcoonroad/hieroglyphs/issues/1","id":441464469,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0MTQ2NDQ2OQ==","user":{"login":"marcoonroad","id":3820407,"node_id":"MDQ6VXNlcjM4MjA0MDc=","avatar_url":"https://avatars3.githubusercontent.com/u/3820407?v=4","gravatar_id":"","url":"https://api.github.com/users/marcoonroad","html_url":"https://github.com/marcoonroad","followers_url":"https://api.github.com/users/marcoonroad/followers","following_url":"https://api.github.com/users/marcoonroad/following{/other_user}","gists_url":"https://api.github.com/users/marcoonroad/gists{/gist_id}","starred_url":"https://api.github.com/users/marcoonroad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcoonroad/subscriptions","organizations_url":"https://api.github.com/users/marcoonroad/orgs","repos_url":"https://api.github.com/users/marcoonroad/repos","events_url":"https://api.github.com/users/marcoonroad/events{/privacy}","received_events_url":"https://api.github.com/users/marcoonroad/received_events","type":"User","site_admin":false},"created_at":"2018-11-25T19:12:32Z","updated_at":"2018-11-25T19:12:32Z","author_association":"OWNER","body":"Proofs-of-Work are often RAM-memory-friendly, so attacks made by ASICs decrease the hardening embedded as a Key Derivation Function here. I should drop such \"hacking\" / workaround and look forward the Aragon2 password-based key derivation function anyways."}}
{"actor":{"display_login":"marcoonroad"}}