client: substitute usage of CTR mode + HMAC by GCM cipher mode

recent reviews have highlighted that our CTR+HMAC in soledad is equivalent to using GCM mode. it would be more efficient, and would reduce the crypto code.

kali also suggested that we should encrypt by chunks (TLS for instance uses 16k chunks), prepending the IV to each one of these. This would solve the need to download the whole stream before being able to deliver it to the sink of the download/decryption pipeline.

(from redmine: created on 2016-12-06, closed on 2017-01-02)

• Relations:
  • child #8681 (closed)