Tag Info

New answers tagged


I'm not aware of any implementations, but I'm also not aware of any patents on this algorithm. Also, one can generically make such schemes tweakable via tFPenc(key,tweak,plaintext) = FPenc(PRF(key,tweak),plaintext) and tFPdec(key,tweak,ciphertext) = FPdec(PRF(key,tweak),ciphertext) .


It all comes down to your threat model, right? Just because an implementation is done in hardware does not mean that power and fault attacks must be considered. If I host the hardware in my secure facility with armed guards at the door, but the hardware is connected to a machine which is connected to the internet, I might feel that it is okay to not be ...

Top 50 recent answers are included