11 reputation
2
bio website
location
age
visits member for 7 months
seen Jul 24 at 5:04

Apr
28
comment Simplified Key Wrapping to Achieve Only Confidentiality?
@D.W. By the way, the reason for my question is precisely the kind of advice you are giving. Many contributors offer words of caution and general advice. Ricky Dermer's response adds something substantial to the discussion so that we don't see the same questions repeated.
Apr
28
awarded  Editor
Apr
28
revised Simplified Key Wrapping to Achieve Only Confidentiality?
added 1067 characters in body
Apr
28
comment Simplified Key Wrapping to Achieve Only Confidentiality?
What do you mean by malleable? The specific hash isn't chosen nor is the length l? What is a "chosen W'" attack? Do you mean guessing W'? I don't understand what you mean about contenation of s and p. As far as I have ever seen, that is a typical method for sending a password through a hash. link. So while I can see that the expense of computing something like AES is going to much greater than SHA256, is that really the best reason that it is better for key wrapping?
Apr
27
awarded  Student
Apr
27
asked Simplified Key Wrapping to Achieve Only Confidentiality?