KittyPatch/kitty
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Use the RFC as the reference for base-85 encoding

Browse Source
This commit is contained in:
Kovid Goyal 2022-08-12 15:38:28 +05:30
parent da9ffc9b93
commit d73ceb26ae
No known key found for this signature in database
GPG Key ID: 06BC317B515ACE7C
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
docs/rc_protocol.rst
View File

@ -52,12 +52,11 @@ terminal is encrypted to keep the password secure. A public key is used from
the :envvar:`KITTY_PUBLIC_KEY` environment variable. Currently, only one the :envvar:`KITTY_PUBLIC_KEY` environment variable. Currently, only one
encryption protocol is supported. The protocol number is present in encryption protocol is supported. The protocol number is present in
:envvar:`KITTY_PUBLIC_KEY` as ``1``. The key data in this environment variable :envvar:`KITTY_PUBLIC_KEY` as ``1``. The key data in this environment variable
is `Base-85 <https://github.com/git/git/blob/master/base85.c>`__ encoded. The is :rfc:`Base-85 <1924>` encoded. The algorithm used is `Elliptic Curve Diffie
algorithm used is `Elliptic Curve Diffie Helman Helman <https://en.wikipedia.org/wiki/Elliptic-curve_Diffie–Hellman>`__ with
<https://en.wikipedia.org/wiki/Elliptic-curve_Diffie–Hellman>`__ with the the `X25519 curve <https://en.wikipedia.org/wiki/Curve25519>`__. A time based
`X25519 curve <https://en.wikipedia.org/wiki/Curve25519>`__. A time based nonce nonce is used to minimise replay attacks. The original JSON command has the
is used to minimise replay attacks. The original JSON command has the fields: fields: ``password`` and ``timestamp`` added. The timestamp is the number of
``password`` and ``timestamp`` added. The timestamp is the number of
nanoseconds since the epoch, excluding leap seconds. Commands with a timestamp nanoseconds since the epoch, excluding leap seconds. Commands with a timestamp
more than 5 minutes from the current time are rejected. The command is then more than 5 minutes from the current time are rejected. The command is then
encrypted using AES-256-GCM in authenticated encryption mode, with a symmetric encrypted using AES-256-GCM in authenticated encryption mode, with a symmetric