{"action":"created","issue":{"url":"https://api.github.com/repos/theupdateframework/tuf/issues/119","labels_url":"https://api.github.com/repos/theupdateframework/tuf/issues/119/labels{/name}","comments_url":"https://api.github.com/repos/theupdateframework/tuf/issues/119/comments","events_url":"https://api.github.com/repos/theupdateframework/tuf/issues/119/events","html_url":"https://github.com/theupdateframework/tuf/issues/119","id":19660878,"number":119,"title":"Review cryptography","user":{"login":"dachshund","id":339997,"avatar_url":"https://avatars.githubusercontent.com/u/339997?v=3","gravatar_id":"","url":"https://api.github.com/users/dachshund","html_url":"https://github.com/dachshund","followers_url":"https://api.github.com/users/dachshund/followers","following_url":"https://api.github.com/users/dachshund/following{/other_user}","gists_url":"https://api.github.com/users/dachshund/gists{/gist_id}","starred_url":"https://api.github.com/users/dachshund/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dachshund/subscriptions","organizations_url":"https://api.github.com/users/dachshund/orgs","repos_url":"https://api.github.com/users/dachshund/repos","events_url":"https://api.github.com/users/dachshund/events{/privacy}","received_events_url":"https://api.github.com/users/dachshund/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/theupdateframework/tuf/labels/review","name":"review","color":"0b02e1"},{"url":"https://api.github.com/repos/theupdateframework/tuf/labels/security","name":"security","color":"e10c02"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2013-09-18T04:00:40Z","updated_at":"2015-02-18T16:18:18Z","closed_at":null,"body":"We need to review the cryptography used in TUF.\r\n\r\nIn particular, I need to review the cryptography decisions that @vladimir-v-diaz has made while adopting PyCrypto.\r\n\r\nFurthermore, we need to review the specific cryptographic techniques adopted by TUF to ensure that it is reasonably future-proof. We need to understand what the cryptographers recommend in light of recent news.\r\n\r\n* [The NSA Is Breaking Most Encryption on the Internet](https://www.schneier.com/blog/archives/2013/09/the_nsa_is_brea.html)\r\n* [The NSA's Cryptographic Capabilities](https://www.schneier.com/blog/archives/2013/09/the_nsas_crypto_1.html)\r\n* [Matthew Green Speculates on How the NSA Defeats Encryption](https://www.schneier.com/blog/archives/2013/09/matthew_green_s.html)"},"comment":{"url":"https://api.github.com/repos/theupdateframework/tuf/issues/comments/74893089","html_url":"https://github.com/theupdateframework/tuf/issues/119#issuecomment-74893089","issue_url":"https://api.github.com/repos/theupdateframework/tuf/issues/119","id":74893089,"user":{"login":"vladimir-v-diaz","id":3520883,"avatar_url":"https://avatars.githubusercontent.com/u/3520883?v=3","gravatar_id":"","url":"https://api.github.com/users/vladimir-v-diaz","html_url":"https://github.com/vladimir-v-diaz","followers_url":"https://api.github.com/users/vladimir-v-diaz/followers","following_url":"https://api.github.com/users/vladimir-v-diaz/following{/other_user}","gists_url":"https://api.github.com/users/vladimir-v-diaz/gists{/gist_id}","starred_url":"https://api.github.com/users/vladimir-v-diaz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vladimir-v-diaz/subscriptions","organizations_url":"https://api.github.com/users/vladimir-v-diaz/orgs","repos_url":"https://api.github.com/users/vladimir-v-diaz/repos","events_url":"https://api.github.com/users/vladimir-v-diaz/events{/privacy}","received_events_url":"https://api.github.com/users/vladimir-v-diaz/received_events","type":"User","site_admin":false},"created_at":"2015-02-18T16:18:18Z","updated_at":"2015-02-18T16:18:18Z","body":"No worries."}}