13 reputation
3
bio website obscur.me
location New Zealand
age 25
visits member for 11 months
seen Oct 26 at 22:29

Dec
30
awarded  Scholar
Dec
30
comment With Encrypt-then-MAC, and flexible protocols, do I need to authenticate the authentication?
Sorry I took a while to 'accept' the answer. I did appreciate the time taken. I ended up MACing the encryption configuration (as a protobuf-serialised object byte array) concatenated to the cipher text - so, EtM. While you mistook my question as relating to a network protocol, the type of answer given reminded me that it's all about detecting cipher text changes, so information about the plaintext cannot be leaked out to the attacker. So long as I make sure that doesn't happen (by detecting and discarding), things should be good. (do tell me if I'm wrong about this, of course)
Dec
30
accepted With Encrypt-then-MAC, and flexible protocols, do I need to authenticate the authentication?
Dec
23
awarded  Autobiographer
Dec
23
awarded  Student
Dec
22
asked With Encrypt-then-MAC, and flexible protocols, do I need to authenticate the authentication?