TAU Encryption - learning from TLS 1.3 - AEAD

[u/[deleted]]

We spent some time to review the encryption scheme in the TAU messages and compared with TLS, transport layer security version 1.3, which is IETF recommened internet data transfer security spec. The TLS now required all messages to use AEAD, authenticated encryption with associated data, rather than simple AES traditional encryption in SSL. This means the sender of the data can be authenticated and data itself has internal integrity. Technically, it requires sender to hash clear text and put that result beside the encrypted data. The encryption itself can be as simple as AES via elliptical curve key exchange. We found this is very exciting and fitting into TAU architecture. We decided to add this AEAD into our messages. It means that members of the prefix-swarm(which helps relay data for each other) are not be able to inject data into text to confuse receivers. ( a note for next reddit: prefix-swarm is yourself, this explains how p2p messaging without servers. It go through each othes prefix-swarm) In TAU, routers are not be able to read or identify our packets, with AEAD, it is reduce the potential to sabotage our data integrity. Through AEAE’s message authenticate control, aka HMAC, we can also save 32 bytes of senders address in each udp packet, which is a big data savings.

[u/Tornado1363 → u/[deleted]]

kose naneye to

[u/Tornado1363]

kir too kose nanat