Re: Using AES256 cipher directly...?

2018-12-07 Thread Paul Smith
Thanks for your reply Martin! On Fri, 2018-12-07 at 10:46 -0500, Martin Thomson wrote: > Unfortunately, we can't say that we have a PAKE, so I appreciate that > you aren't able to just drop that in. A concern is that I have to support full backward-compatibility, not a "flag day" upgrade, so unle

Using AES256 cipher directly...?

2018-12-07 Thread Paul Smith
Hi all. Hopefully this is the right place. I have a system (first created ~8 years ago) based on SRP and RC4 (I know). This system creates TCP connections rarely and uses them for a very long time, and they cannot be dropped/reconnected without user- visible disruption, so it's very different fr