
Support tar compression
Reported by wingman | December 3rd, 2014 @ 12:10 PM
By default openpgp uses compression (RFC4480)
However it would be really good to support more compression algorithms (example: tar). This is a feature already available via CLI
tar czvpf - Screen\ Shot\ 2014-12-02\ at\ 14.58.31.png Screen\ Shot\ 2014-11-30\ at\ 13.18.29.png | gpg -e -r *recipient KEY ID * -o secure.tar.gz.gpg
Compression increases the protection against frequency attacks and brute force attacks as it helps to reduce the redundancy in the data (protection against frequency attack) and because of the compression the brute force attack will take longer (as the attacker needs to decrypt the data first ,then decompression it)
Ideally GPGservices GUI should provide a dropdown menu to the user in order to choose from an available compression algorithm
Also the user should have an option NOT to compress before encryption as this is not always advisable (CRIME AND BEAST ATTACKS are classic example where compression before encryption actually leaked information about the content itself)
see also: https://gpgtools.lighthouseapp.com/projects/73378-libmacgpg/tickets...
Comments and changes to this ticket
-
-
steve June 22nd, 2018 @ 11:21 AM
- Tag cleared.
- Importance changed from to Low
Thoughts:
- Option for "no compression" will not make it into GPGServices.
CLI can be used for that.
- tar is an archive format
- for compression there are two options
a) using gpg compression (currently) and optionally adjust parameters b) create a compressed archive prior to encryption (.7z, .rar, .tar.xz, .zip, .tar.gz, .tar.zst etc)
Currently GPGServices creates a zip archive when more than a single file is encrypted.
Advantage when adding tar: smaller files and potentially better compatibility.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป