Live data from Hacker News

Show HN: Arc – secure file archiver

github.com

21–30 of 45 posts

Re: Show HN: Arc – secure file archiver

#22
post #6

This is the first that I've heard of ChaCha for encryption ( https://en.wikipedia.org/wiki/Salsa20#ChaCha_variant ). Apparently it's a standard that Google is pushing to replace RC4 and already is using for HTTPS between google.com and Android. If arc catches on I'm curious if it could support inline operations. E.g. on a 100gb+ archive can I read the tar index without decrypting the entire archive first, can I extra…

Your understanding is backwards. Stream ciphers are fundamentally compatible with random-access decryption, so yes this is entirely possible.

That said, authentication of a ciphertext is, in many ways, as important as encryption. So you would need to design the archive format in such a way that individual files' contents could be authenticated and decrypted on the whole, instead of authenticating the contents of the entire archive.

Re: Show HN: Arc – secure file archiver

#23

Earlier quoted context omitted.

What do you do to keep your GPG keys safe (i.e. so you don't accidentally lose them)?

in that example he is using symmetric encryption , so a password, no private key.

Symmetric encryption is still based on secret keys, not passwords. Symmetric cryptosystems that appear to use passwords just transform them with a key derivation function into a suitable-length encryption key for the underlying cipher.

Re: Show HN: Arc – secure file archiver

#24
post #6

This is the first that I've heard of ChaCha for encryption ( https://en.wikipedia.org/wiki/Salsa20#ChaCha_variant ). Apparently it's a standard that Google is pushing to replace RC4 and already is using for HTTPS between google.com and Android. If arc catches on I'm curious if it could support inline operations. E.g. on a 100gb+ archive can I read the tar index without decrypting the entire archive first, can I extra…

Streams can be encrypted and decrypted, even arbitrarily. Here's a good read by Adam Langley: https://www.imperialviolet.org/2014/06/27/streamingencryptio...

Re: Show HN: Arc – secure file archiver

#25
post #6

This is the first that I've heard of ChaCha for encryption ( https://en.wikipedia.org/wiki/Salsa20#ChaCha_variant ). Apparently it's a standard that Google is pushing to replace RC4 and already is using for HTTPS between google.com and Android. If arc catches on I'm curious if it could support inline operations. E.g. on a 100gb+ archive can I read the tar index without decrypting the entire archive first, can I extra…

ChaCha is also going to be the default for OpenSSH encryption (it's already supported by upstream, but I don't know if they've changed the default yet).

Re: Show HN: Arc – secure file archiver

#30
Can anyone tell me what advantage tgz has over zip? I usually curse when I have to use it, because it lacks indexes and is pretty much only good for archival tapes, if that. I wish we'd all move to a more modern format, like zip or 7zip.
Post reply on HN