aes加密可否添加salt使用hkdf派生key
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 30/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Active
- Tech stack
- swift
- Domain
- cryptography, security
Research direction
No file or test is named. Start by locating the existing AES-GCM encryption and decryption implementation, then assess the proposed HKDF-derived key and compatibility behavior for messages without a salt. Done means the scope and backward-compatibility requirements are defined and verified with appropriate encryption tests.
Written by the indexing model from the issue text.
Description
使用aes gcm加密如果iv重复就不能保证安全性了，可否在在iv字段外再加个salt字段（16字节或32字节随机），主key和salt通过hkdf派生出子key用作aes加解密的key，这样只要主key不泄露安全性就万无一失了，如果客户端没提交salt使用原来的方法解密保证兼容性。
- Dominant language
- Swift
- Stars
- 9.2k
- Forks
- 711
- Avg merge
- 7m
- Merged PRs (30d)
- 1
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from Finb/Bark
-
Difficulty 1/5 Under an hour Newbie friendliness 65/100
-
希望能能接入安卓消息推送和winOpen
Difficulty 5/5 Over a week Newbie friendliness 20/100
-
get/post 单次请求，收到多条通知Open
Difficulty 3/5 1-2 days Newbie friendliness 35/100
-
希望增加支持非对称(公钥)加密推送Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
-
in progress
Difficulty 5/5 Over a week Newbie friendliness 35/100
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
vorssaint/vorssaint-utils#2481 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 87/100
Maintainers usually reply within 1 day
-
area: build-and-ci bug difficulty:1 good first issue help wanted S3: minor
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
manaflow-ai/cmux#16193 ·
Maintainers usually reply within 1 day
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 84/100