2017 - Brian Warner - Move Things From One Computer to Another, Safely

Magic Wormhole is the easiest way to send files and directories securely from one computer to another. The talk (briefly) covers the cryptographic algorithms it uses and how it improves on other tools.

Video: https://youtu.be/YhoYq6wQEto

Transcript

1. Move Things From One Computer to Another, Safely Brian Warner magic-wormhole.io PyBay 2017
2. Magic-Wormhole: a File Transfer Program • Securely moves a file from one computer to another • or a directory, or a string • My claim: easier than all other secure tools • Especially for moving to an unrelated computer
3. What It Looks Like pip install magic-wormhole
4. What It Looks Like pip install magic-wormhole
5. "easily". "safely". dictate string to sender dictate string to receiver needs proximity eavesdroppers send email ~30 chars ISPs, CAs, internet upload to FTP/HTTP ~60 chars server, ISPs, CAs, internet dropbox ~60 chars Dropbox, CAs + URL shortener ~20 chars Shortening Service, lucky guessers, Dropbox, CAs Firefox Send 68 chars none (but web-based client) USB drive X eww cooties SSH/scp ~740 char pubkey none magic wormhole ~20 chars none
6. PAKE-based Security P assword A uthenticated K ey E xchange 1992: EKE 1997: SRP 2005: SPAKE2 2008: J-PAKE
7. Rendezvous Server typical code: 1-liberty-assume Channel ID
8. Data Relay Server
9. Magic-Wormhole Move Things From One Computer to Another, Safely Brian Warner https://github.com/warner/magic-wormhole warner@lothar.com @lotharrr magic-wormhole.io pip install magic-wormhole