Limnoria/Supybot FiSH (CBC) encryption plugin, (X-Post to /r/Python)
reddit / irc

----------------------------------------------------------------------
MuffinMedic · 2016-09-03 22:26

[Blowfish](https://en.wikipedia.org/wiki/Blowfish_\(cipher\)#Weakness_
and_successors) has some large, well-known vulnerabilities and is no
longer considered safe. If you require that sort of encryption, then
use [OTR](http://wiki.znc.in/Otr) instead. It uses AES + DH, which is
much more secure.

*Note:* Comment copy/pasted from another comment of mine.

----------------------------------------------------------------------
[deleted] · 2016-09-04 08:02

[deleted]

----------------------------------------------------------------------
megahambone · 2016-09-04 08:12

> From what I can tell, OTR doesn't support multi-user chats, which
makes it a poor match for IRC. (If I'm wrong, feel free to link me)
> I'm aware that Blowfish ECB is pretty much useless, but with
Blowfish CBC and frequent key changes and the avoidance of
reflectively weak keys, it's probably the best you're going to get for
a group of people. Furthermore, it's well supported by a number of
clients, so I thought it was a neat idea to get a common bot using the
same encryption.
> From what I understand from here (I am not a crypto expert) I would
need to have a weak key, and would need to have about 34gb of IRC
throughput in order to seriously worry about the possibility of being
reversed. That's a hell of a lot of text.
> Source: http://crypto.stackexchange.com/a/19529
> Full disclosure: I wrote the plugin, but I'm not a crypto expert.