Reputation
Top tag
Next privilege 20 Rep.
Talk in chat
Badges
1
Newest
 Student
Impact
~197 people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
May
8
comment When is it safe to not use authenticated encryption?
I have heard some users think its a good idea to put their files inside an encrypted TrueCrypt container then put the container on DropBox (or other cloud provider) so there is an additional layer of encryption if they do not trust the cloud provider. But that does not sound particularly safe because the cloud provider can modify your data or they could be forced to by NSA. So if TrueCrypt is not using authenticated encryption then that does not sound particularly safe. If a user attempts decryption with the modified data can malware e.g. BadBIOS potentially infect their machine?
May
8
comment When is it safe to not use authenticated encryption?
Why would they need the constraint that the ciphertext not be any larger than the plaintext @brock?
May
7
awarded  Student
May
7
asked When is it safe to not use authenticated encryption?