#208 new
wingman

Support tar compression

Reported by wingman | December 3rd, 2014 @ 12:10 PM

By default openpgp uses compression (RFC4480)

However it would be really good to support more compression algorithms (example: tar). This is a feature already available via CLI

tar czvpf - Screen\ Shot\ 2014-12-02\ at\ 14.58.31.png Screen\ Shot\ 2014-11-30\ at\ 13.18.29.png | gpg -e -r *recipient KEY ID * -o secure.tar.gz.gpg

Compression increases the protection against frequency attacks and brute force attacks as it helps to reduce the redundancy in the data (protection against frequency attack) and because of the compression the brute force attack will take longer (as the attacker needs to decrypt the data first ,then decompression it)

Ideally GPGservices GUI should provide a dropdown menu to the user in order to choose from an available compression algorithm

Also the user should have an option NOT to compress before encryption as this is not always advisable (CRIME AND BEAST ATTACKS are classic example where compression before encryption actually leaked information about the content itself)

see also: https://gpgtools.lighthouseapp.com/projects/73378-libmacgpg/tickets...

Comments and changes to this ticket

  • Support
  • steve

    steve June 22nd, 2018 @ 11:21 AM

    • Tag cleared.
    • Importance changed from “” to “Low”

    Thoughts:

    1. Option for "no compression" will not make it into GPGServices. CLI can be used for that.
    2. tar is an archive format
    3. for compression there are two options
      a) using gpg compression (currently) and optionally adjust parameters b) create a compressed archive prior to encryption (.7z, .rar, .tar.xz, .zip, .tar.gz, .tar.zst etc)

    Currently GPGServices creates a zip archive when more than a single file is encrypted.

    Advantage when adding tar: smaller files and potentially better compatibility.

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile »

Shared Ticket Bins

People watching this ticket

Pages