p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Island: Remove TODO comment about using cryptography.fernet

This commit is contained in:
Shreya Malviya 2022-07-15 11:16:53 +05:30
parent 09e57541cc
commit c1449fb897
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
monkey/monkey_island/cc/server_utils/encryption/key_based_encryptor.py
View File

@ -27,10 +27,6 @@ class KeyBasedEncryptor(IEncryptor):
def __init__(self, key: bytes): def __init__(self, key: bytes):
self._key = key self._key = key
# TODO: Let's use cryptography.fernet. It's simpler for us and we're less likely to screw
# something up. The main drawback to fernet is that it uses AES-128, which is not
# quantum-safe. At the present time, human error is probably a greater risk than quantum
# computers.
def encrypt(self, plaintext: bytes) -> bytes: def encrypt(self, plaintext: bytes) -> bytes:
cipher_iv = Random.new().read(AES.block_size) cipher_iv = Random.new().read(AES.block_size)
cipher = AES.new(self._key, AES.MODE_CBC, cipher_iv) cipher = AES.new(self._key, AES.MODE_CBC, cipher_iv)