Hot answers tagged

1

No, RSA encryption does not provide authenticity, regardless of the padding. This is for the simple reason that anybody can encrypt with the public key. This is irrespective of the asymmetric algorithm used. You need to sign the data to obtain authenticity. What AEAD does do is to protect e.g. against padding oracle attacks. These can be performed on CBC ...


1

Let's start from the top and work down, using FIPS 202 as reference. Note that the KECCAK paper uses a somewhat different notation (!). $$\operatorname{SHA3-224}(M) = \operatorname{KECCAK}[448] (M | 01, 224)$$ $$\operatorname{SHA3-256}(M) = \operatorname{KECCAK}[512] (M | 01, 256)$$ $$\operatorname{SHA3-384}(M) = \operatorname{KECCAK}[768] (M | 01, 384)$$ $$...



Only top voted, non community-wiki answers of a minimum length are eligible