Encryption

Introduction

Access to Xpra's sessions over TCP (see network connection) can be protected using authentication modules but those do not protect the network connection itself from man in the middle attacks. For that, you need encryption.
Xpra's encryption layer uses the ​pycrypto library to:

• encrypt the network packets with ​AES (Advanced Encryption Standard) ​CBC mode (Cipher-block chaining)
• stretch the "passwords" with ​PBKDF2 (Password-Based Key Derivation Function 2)

The salts used are generated using Python's ​uuid.uuid4()

Setup