Re: Feature Suggestion - scp don't decrypt file at,

On Wed, Apr 06, 2005 at 02:18:50PM -0700, Gerard J. Cerchio wrote:
> Peter Stuge wrote:
> >The encryption "environment" in which scp and sftp runs (provided by
> >ssh) works well as designed but is probably not the best choice for
> >encrypted disk storage.
>
> Peter I wonder if you can expand on this. Once the data has been
> run through an encryption what does it matter if it is in transport
> or static?

An encryption is only as secure as it's key. The keys used to encrypt
the data stream are generated on the fly and rekeying may occur
frequently in a session. Just keeping track of all of these keys
seems like a lot of work for not much benefit.

But, like I said, if you want to make a backup subsystem I doubt
anyone would object. If you release it and it's handy I'll use it
too! :)


//Peter

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://www.mindrot.org/mailman/listi...enssh-unix-dev