[OpenAFS] my afs wish list

Derrick J Brashear shadow@dementia.org
Mon, 28 Apr 2003 23:33:46 -0400 (EDT)


On Mon, 28 Apr 2003, Marcus Watts wrote:

> The next step is to actually make rx & rxkad talk AES.  There's a

Can't rxkad die already? What's the big deal about a new security class
where stuff isn't jury-rigged in?

> couple of issues here.  A nice practical low-level problem is figuring
> out how to deal with block size issues, and a related issue is to think
> really hard about checksums, confounders, and all that.  (K5 AES will
> do "CTS", which means the block size issue isn't actually as bad as it
> sounds).  After that, it's mainly a matter of figuring out how to hook
> it into the protocol & all without doing too much violence to the whole
> thing.  This is definitely something I want to see happen, and it's
> something I plan to spend time on this summer (assuming somebody
> doesn't beat me to it.)