Tag Info

New answers tagged

0

I'm not aware of any implementations, but I'm also not aware of any patents on this algorithm. Also, one can generically make such schemes tweakable via tFPenc(key,tweak,plaintext) = FPenc(PRF(key,tweak),plaintext) and tFPdec(key,tweak,ciphertext) = FPdec(PRF(key,tweak),ciphertext) .


3

It all comes down to your threat model, right? Just because an implementation is done in hardware does not mean that power and fault attacks must be considered. If I host the hardware in my secure facility with armed guards at the door, but the hardware is connected to a machine which is connected to the internet, I might feel that it is okay to not be ...



Top 50 recent answers are included