Mitigate length fingerprinting #3
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Metadata chunk should be limited and padded to exactly 1 MiB (including any unencrypted nonce). File data chunks should be exactly
CHUNK_SIZE, and the final chunk should be padded toCHUNK_SIZEbytes.CHUNK_SIZEshould be chosen so as to strike a balance between minimizing plain-text leakage of the length, while not adding unreasonable overhead to transmission. I believe that a 1 MiB chunk size should be reasonable for this purpose.An alternative that could be explored is additionally padding total number of chunks to a multiple of some power of 2. That power of 2 would scale depending on the total number of chunks so as to minimize distinguishability in any given length class.
The Android app uploads chunks of a fixed size, except for the last chunk which is not yet padded.