RSAAffix needs a method for using provided key. about affix HOT 3 CLOSED

What is the purpose of the affix? Is it meant to provide confidentiality
and integrity?

Why do we need a per-connection pair? Are we trying to add support for
authenticity?

On Mon, Oct 7, 2013 at 4:48 PM, monzum [email protected] wrote:

Currently the RSAAffix generates a new set of public/private key pair for
every connection. We need to modify it a little bit to allow users to
provide their own set of keys, if they want to.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/17
.

from affix.

The purpose of the affix is to provide both confidentiality and integrity. Currently a new set of keys are generated for each connection as the pair of remote host/port may not be the same for each connection. Thus the affix generates a new set of keys with which it can communicate.

However it would be nice to allow users to provide their own public/private key if they are worried about certain man in the middle attacks. In this scenario both the client and needs to have the appropriate keys in order for them to communicate.

This is more of an enhancement that can be added to our current implementation of the RSAAffix.

from affix.

There is no RSAAffix for the current Affix implementation. WONTFIX.

from affix.