8 reputation
2
bio website
location
age
visits member for 5 months
seen Feb 13 at 9:43

Feb
13
comment crypto design with AES256 MODE OFB
Thank you for you comment. The key store is protected by SHA512 hash in clear text (at minimum) or optionally with an key store password encrypted SHA512 hash if the user wishes that (which has some implication on usability because any change must be immediately saved and even changes on clear text data must be authorized by key store password and if the user uses more than one password, he must remember which of these unlocks the SHA512).After all I think I'm too paranoid.
Feb
12
comment crypto design with AES256 MODE OFB
Thank you very much. You answer does precisely show me, how much I do not know about cryptography. For your suggestions: unfortunately I can not pick the "newer" op modes, I currently stick to those apple provides (which are ECB,CBC,CFB and OFB (to avoid mistakes I would do on my implementation). I choosed OFB because it is currently hard to parallelize from what I understood). The main goal is to make it impossible to guess how many password are used in the store. Additionally increase the pain to brute force the passwords (it will be public domain app to store passwords in a secure manner).
Feb
12
awarded  Scholar
Feb
12
accepted crypto design with AES256 MODE OFB
Feb
12
awarded  Student
Feb
12
asked crypto design with AES256 MODE OFB