# Tag Info

1

$\;\;\;$ Sure. $\:$ The simplest way is to OTP-encrypt the $\;\;\;$ output of an almost xor-universal hash family. $\;\;\;$ That could be used for encrypt-then-MAC, where $\;\;\;$ the MAC is applied to an ordered pair that indicates $\;\;\;$ [the message number or how far into the pad to start] and the OTP ciphertext. $\;\;\;$ (Presumably, the pairing ...

3

The best option you have is TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA. This is likely to provide most security, as the AES keylength is maximal and ECDSA keys tend to provide more security than RSA keys, as a 128-bit security level is quite common with ECDSA (field size: 256 bit) whereas 112-bit is the standard with RSA (keylength: 2048 bit). However in practice ...

3

The security notion one usually considers for OTP is perfect secrecy, which informally means that the ciphertext does not reveal any information about the original message, regardless of the computational power of the adversary. It is already known that this requires that the key size must be equal to the plaintext size and that all keys are equiprobable. ...

Top 50 recent answers are included