Blowfish cipher in Web Crypto API

Can cloudflare include the blowfish cipher in the Web Crypto API?

Why would blowfish be useful to you?

There are quite a few disadvantage of Blowfish compared to the other ciphers we support in our WebCrypto environment in workers. has a 64-bit block size and extremely slow key schedule. This creates security issues when encrypting large amounts of data, as well as inefficiencies when encrypting small amounts of data. It is deeply tied to 32 bit CPUs. Blowfish has never been widely supported in standards, and the creator is recommending you not use it. https://www.schneier.com/academic/blowfish/#:~:text=Blowfish%20is%20a%20symmetric%20block,alternative%20to%20existing%20encryption%20algorithms. As a result I think it’s pretty unlikely that support will be prioritized.

I’d encourage you to consider migration to something more modern like AES-128.

2 Likes

This topic was automatically closed after 30 days. New replies are no longer allowed.