Tell me more ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Hello I wanted to ask if there is any review about the security of the AES implementation of the .net Framework? I found nothing concrete to that question, searching the Internet. And, but this is a Little bit off-Topic to this question, is it secure to use a hash of the plaintext(or file) and use this as a test if the decryption worked correct (as a MAC)?

------Edit--------

I'm sorry, I will precise my question: I wanted to know, if the AES implementation of the .net Framework meets the official AES implementation and if there are any reviews of mistakes in the implementation, that would weaken the security of AES. And if there is any review about the security against attacks, like the timing attack.

With the MAC, I ment that I build the hash of the file, to be encrpted, add this hash to the file and then encrypt this together. When I encrypt the file, I build the hash of the file again and compare it to the hash I encrypted with the file together. If they match the decryption should have worked correct. Or is there any saver way to check if the decryption was correct (this should replace a check of the key itself).

I hope my question is more clear now.

share|improve this question
Your question is pretty vague. What kind of weakness in .net's AES are you looking for? Timing attacks? I wouldn't worry too much about problems with .net's library itself, but rather about your code using it. The bad API makes it hard to write secure encryption in .net. Your second question is even more vague, you didn't really describe your scheme. But it's probably not secure. There are several related questions, such as "Non-cryptographic hash function as MAC for stream ciphers". – CodesInChaos Feb 3 at 14:27

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.