GamePad64
Joined 11 years ago
Joined 11 years ago
So, I've tried to make the spec as generic as possible, so it could support current compicated cases, like git (with its infinite number of commands and options), scp (with its remote file listing), some old Windows commands (like "format" for windows95 and so on).
Also, this format could be used with a single-pass recursive generator, because each usage pattern is just a JSON array and all its properties can be defined in-place. So, it would be okay to use it with languages, like C, that have no JSON serializer built-in.
This HMAC is computed over plaintext chunks and used to determine, if we already have this chunk in database (because of random IV we get different hash of ciphertext every time), not for verification.
And what is wrong about verifying integrity and authenticity by hash-then-sign?
But to let you control the daemon via the net, I am making Web UI, that will enable you to fully control synchronization process from your browser.