WTF is "TWF 256 encryption"?

[angussf]

(Sorry, couldn't resist the "WTF" given the name of the encryption you're using ;-)) I can't find anything about it here or on the 'net ...

[redge]

The buildin encryption use DH key-exchange

Export
------
This distribution includes cryptographic software. The country in
which you currently reside may have restrictions on the import,
possession, use, and/or re-export to another country, of
encryption software. BEFORE using any encryption software, please
check your country's laws, regulations and policies concerning the
import, possession, or use, and re-export of encryption software, to
see if this is permitted.

The U.S. Government Department of Commerce, Bureau of Industry and
Security (BIS), has classified this software as Export Commodity
Control Number (ECCN) 5D002.C.1, which includes information security
software using or performing cryptographic functions with asymmetric
algorithms.

The following provides more details on the included cryptographic
software:
Intel IPP crypto lib (CCATS# G025801 ECCN 5D002)


reference:
[topic=7542][/topic]

[angussf]

The buildin encryption use DH key-exchange

This tells me nothing about the underlying technology ... so do many modern crypto systems. I'm looking for something documented about the encryption, like I can find about Blowfish or Twofish or AES ....

The following provides more details on the included cryptographic
software:
Intel IPP crypto lib (CCATS# G025801 ECCN 5D002)

When I google for that all I turn up is one message in this forum.

IMHO if you're going to include encryption, especially in a GPL'd OSS project you need to provide serious documentation on the crypto otherwise it can't be considered safe to use.

[Rudi De Vos]

The encryption used is provided by the intel ipp library.
We didn't write our own encryption, but used the encryption
provided by the commercial Intel ipp lib.

Info lib
http://www.intel.com/cd/software/produc ... 302910.htm

DH +512 prime exchange (public/private key)
Twofish 256 key encryption is used. Standard Twofish encryption,
we use the crypt(), decrypt() ipp functions for it.

[angussf]

The encryption used is provided by the intel ipp library.
We didn't write our own encryption, but used the encryption
provided by the commercial Intel ipp lib.

Info lib
http://www.intel.com/cd/software/produc ... 302910.htm

DH +512 prime exchange (public/private key)
Twofish 256 key encryption is used. Standard Twofish encryption,
we use the crypt(), decrypt() ipp functions for it.

Perfect, thanks!

[sure]

TWF is actually TWoFish, a rather strange abbreviation.

We didn't write our own encryption, but used the encryption
provided by the commercial Intel ipp lib.

One could wonder how safe it is, then. The NSA or MI* or AIVD will not find it hard to decrypt, is my guess.