[Python-ideas] adding digital signature and encryption "hashes" to hashlib?
Bill Janssen
janssen at parc.com
Tue Sep 22 21:23:21 CEST 2009
CTO <debatem1 at gmail.com> wrote:
> If you don't know what the application is, you don't know what's
> secure and what isn't. We have no way of knowing, and so should resist
> the temptation to guess.
"secure" is not the same as "strongly encrypted". I'm looking at
providing a simple way to do encryption here, not security. Let's just
focus on that, first. I think defaulting to Blowfish or AES256 would be
a reasonable tack to take there. I suggested AES256 because it seems
to me more likely to be widely available.
> AFAIK, AES and RSA are the most commonly used algorithms in EVP.
> Maybe it would make more sense to take the more traditional
> keygen-encrypt-decrypt approach?
Sure, maybe so. What would a proposed interface look like, then?
Bill
More information about the Python-ideas
mailing list