Hot answers tagged keys
2
All too often I describe some process saying that "he" did something to "his" message,
and it makes sense in my own head, but no one else can figure out which of the several people involved that those pronouns refer to.
Or worse -- sometimes I say that "the message is encrypted", but I don't say who does it and with which key.
That's why all the good ...
2
Generally speaking: no, it is not OK. If you're going to encrypt any data at all with this key, you shouldn't reuse it to MAC other data. Using the same key for two purposes is bad practice and has often led to security problems in the practice.
Encrypting data without MACing it is also bad practice.
Instead, I recommend you use an "authenticated ...
2
It depends on how you encrypt and mac.
If you can still choose then you should use an authenticated encryption with associated data mode (AEAD) like Galois/Counter Mode. If all data you want authenticated in a message has to be transmitted in the clear then just leave the encrypted part empty. These modes have the advantage that they were designed to use ...
2
You never use RSA to encrypt large binary objects, since it's to expensive to do many calculations.
Instead, RSA is used in a key exchange or key transport protocol to send a key for a symmetric-key algorithm, such as AES (with a cipher chaining mode, such as CBC), which is then used to encrypt huge messages.
Also note that textbook RSA isn't secure. Some ...
1
In entity authentication, the parties do not necessarily exchange a session key, but authenticate to each other by providing some proof related to their identites. For instance, if one party signs a challenge given by its partner, this party proves its identity.
Implicit key authentication merely guarantees that the partner (with whom you are talking right ...
Only top voted, non community-wiki answers of a minimum length are eligible
