Skip to content

add blake3, blake2b is legacy#9643

Open
ThomasWaldmann wants to merge 6 commits into
borgbackup:masterfrom
ThomasWaldmann:blake3
Open

add blake3, blake2b is legacy#9643
ThomasWaldmann wants to merge 6 commits into
borgbackup:masterfrom
ThomasWaldmann:blake3

Conversation

@ThomasWaldmann
Copy link
Copy Markdown
Member

@ThomasWaldmann ThomasWaldmann commented May 14, 2026

See #8867.

@codecov
Copy link
Copy Markdown

codecov Bot commented May 14, 2026

Codecov Report

❌ Patch coverage is 86.74699% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 83.75%. Comparing base (40572ff) to head (f3213fa).
⚠️ Report is 9 commits behind head on master.
✅ All tests successful. No failed tests found.

Files with missing lines Patch % Lines
src/borg/archiver/key_cmds.py 40.00% 4 Missing and 2 partials ⚠️
src/borg/archiver/transfer_cmd.py 50.00% 1 Missing and 2 partials ⚠️
src/borg/crypto/key.py 95.00% 1 Missing and 1 partial ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master    #9643      +/-   ##
==========================================
- Coverage   83.76%   83.75%   -0.02%     
==========================================
  Files          90       92       +2     
  Lines       15539    15661     +122     
  Branches     2337     2353      +16     
==========================================
+ Hits        13017    13117     +100     
- Misses       1788     1799      +11     
- Partials      734      745      +11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

BLAKE3 is generally faster and provides a more modern construction for
keyed hashing (using its internal keyed mode instead of the construction
used for BLAKE2b).

Key types changed:
- authenticated-blake2 -> authenticated-blake3
- {keyfile,repokey}-blake2-aes-ocb -> {keyfile,repokey}-blake3-aes-ocb
- {keyfile,repokey}-blake2-chacha20-poly1305 -> {keyfile,repokey}-blake3-chacha20-poly1305

This also fixes the slightly unusual way how we used blake2b,
it is only supported for importing borg 1.x repos.

New repos either use HMAC-SHA256 or BLAKE3.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant