Re: CSRF cipher in xor + base64 or Vignere cipher

2015-03-08 Thread Adam Brenecki
To be fair to the Vigenère cipher algorithm, it is insanely simple; I think when I wrote the implementation in that pull request, I was probably inappropriately using lambdas and generator expressions, and in doing so making it look more complicated than it really is. A neater, more readable Vigen

Re: CSRF cipher in xor + base64 or Vignere cipher

2015-03-07 Thread Erik Romijn
Hello, In the context of a one time pad on the CSRF token, I don’t see a security advantage to either cipher here. If I read correctly, the argument for Vignere is that it can already produce output suitable for inclusion in form values, not requiring base64 encoding of the one time pad. I’ve

CSRF cipher in xor + base64 or Vignere cipher

2015-03-07 Thread Asif Saifuddin
Hi, Just start working on this ticket https://code.djangoproject.com/ticket/20869 wondering what should be the preferred way ? using XOR or Vignere Cipher? Reagrds -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itse