Tagged Questions
3
votes
1answer
160 views
Using a derived key for CMAC
Consider the following authenticate-and-encrypt scheme that uses AES-128 in CBC mode for encryption and AES-128 - based CMAC for authentication:
Two keys are derived from the master key k (16 byte): ...
2
votes
1answer
89 views
What “Tag Length” should be used for the EAX MAC?
Since EAX is very flexible with regard to the length of the calculated MAC (what they call "tag" is the MAC value right?), and the EAX paper as well as other documentations carefully avoid suggesting ...
5
votes
2answers
478 views
Encrypt-then-MAC Confidentiality, Integrity and Authenticity
Does Encrypt-then-MAC provide equal confidentiality, integrity and authenticity as other constructs such as EAX?
If yes, how do I go about using it?
My current understanding is:
E = ...
53
votes
5answers
6k views
Should we MAC-then-encrypt or encrypt-then-MAC?
Most of the time, when some data must be encrypted, it must also be protected with a MAC, because encryption protects only against passive attackers. There are some nifty encryption modes which ...
