16 reputation
1
bio website
location
age
visits member for 5 months
seen May 8 at 4:13

May
8
comment When is it safe to not use authenticated encryption?
I have heard some users think its a good idea to put their files inside an encrypted TrueCrypt container then put the container on DropBox (or other cloud provider) so there is an additional layer of encryption if they do not trust the cloud provider. But that does not sound particularly safe because the cloud provider can modify your data or they could be forced to by NSA. So if TrueCrypt is not using authenticated encryption then that does not sound particularly safe. If a user attempts decryption with the modified data can malware e.g. BadBIOS potentially infect their machine?
May
8
comment When is it safe to not use authenticated encryption?
Why would they need the constraint that the ciphertext not be any larger than the plaintext @brock?
May
7
awarded  Student
May
7
asked When is it safe to not use authenticated encryption?