[bind10-dev] BigTool and new module Command/Control

Francis Dupont fdupont at isc.org
Thu Nov 19 15:56:51 UTC 2009


> The message between Command/Control and BigTool is encrypted. 
> Symmetric key encryption  VS Public key encryption. I think symmetric key
> encryption is enough, because the key is only shared by the user and server.
> Please give your comments. :)

=> symmetric key encryption is not enough: a short MAC (aka tag) is needed
to avoid en route modification of cipher texts and associated attacks.

Francis_Dupont at isc.org



More information about the bind10-dev mailing list