Interested in working with Tahrir

[Nidhi Rastogi]

Hello All,

It may come as a late intro since I've already sent a few emails through the mailing list. But making it formal, I'd like to contribute to the Tahrir development.

So here's where my current skill-set w.r.t this project lie:

I have a few years of professional and class-projects level experience using core Java.

Quite an extensive theoretical knowledge of cryptography and have done a few grad level projects. Privacy and security is my research focus and hence would like to get as much involved in Tahrir as much as I can.

With these in mind, I've already familiarized myself with the wiki, open issues and the works. So how do I proceed?

Thanks.

[Ian Clarke]

Hi Nidhi,

Welcome aboard :-)

You might find this issue interesting: https://github.com/sanity/tahrir/issues/21

Currently we're not using any padding for our RSA encryption and apparently this is a security risk, although I haven't had a chance to investigate why this is, or to confirm that it is indeed a risk.

Are you aware of why it would be a risk to use unpadded RSA?  Perhaps you could look into resolving this issue?  It may be as simple as modifying this line, but there could be other implications if it changes the size of the symmetric keys that we encrypt with RSA.

Let me know your Github username and I'll add you to the repository.

Ian.

--
You received this message because you are subscribed to the Google Groups "Tahrir Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tahrir-developm...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

--
Ian Clarke

Blog: http://blog.locut.us/

[Nidhi Rastogi]

Thankyou. My Github username is nidhirastogi.

[Ian Clarke]

Great, I've added you as a collaborator - don't break anything ;-)

Ian.