[Qt-interest] cascaded encryption with AES, Twofish, Serpent - how to create keys in secure way

[Thiago Macieira]

Em Segunda-feira 22 Fevereiro 2010, às 15:55:07, Hagon escreveu:
> Hello!
> I'm developing a simple app using QT and Botan. I would like to implement
> "cascaded encryption" using  AES, Twofish and Serpent (like in truecrypt).
> I know that I must create a "Pipe" or "Chain" with three cipher objects.
> The encryption scheme should use a single password for  all the ciphers
> listed. How to create keys for these three ciphers from the password in
> secure way??? I know that using single key for multiple encryption
> algorithms is rather insecure... This will be an open-source app.

Use either OpenSSL, GNU-TLS or NSS. There's also a wrapper around those 
libraries called QCA that provides Qt-like API.

Qt itself does not provide such functionality.
-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
  Senior Product Manager - Nokia, Qt Development Frameworks
      PGP/GPG: 0x6EF45358; fingerprint:
      E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part.
Url : http://lists.qt-project.org/pipermail/qt-interest-old/attachments/20100222/a0005188/attachment.bin