153 reputation
9
bio website en.wikipedia.org/wiki/…
location Louisiana
age
visits member for 2 years, 4 months
seen Aug 1 '12 at 20:34

I live in mud and eat dead stuff


Jul
27
comment AES GCM symmetric encryption of data at rest in c#, ciphertext much longer than plaintext
Great answer, thank you. I didn't realize the base64 added to the length to the extent that it does.
Jul
27
comment AES GCM symmetric encryption of data at rest in c#, ciphertext much longer than plaintext
Although the question does talk about specifics (and therefore might belong elsewhere) it mainly deals with the general concept of cipher text vs plaintext length so I figured I'd try here. If it should be elsewhere feel free to migrate it.
Jul
24
comment Generating a cryptographically secure, many-time use, symmetric encryption key
I decided to instead use the .net AesManaged class and simply extract the key it creates under the assumption that that key will be at least as secure as the above method
Jul
18
comment Other than brute force, are there any attacks on Threefish-512 using only a single known plaintext block?
yep all of that it correct. I'll edit to make it more clear
Jul
16
comment How to communicate authentication tag for GCM?
Alright thanks for the answer and letting me know about the code
Jul
13
comment Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
I didn't realize CCM meant using CBC as the MAC and CTR as the mode until just now. I primarily avoided CBC-then-MAC because of the padding issues. My impression is that CCM, GCM, and CBC-then-MAC are all secure though.
Jul
13
comment Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
Also any comment on the Padding oracle attacks?
Jul
13
comment Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
HMAC is implemented, but CCM is not, so I would have to combine them myself. I already wrote the encrypt/decrypt routines here in my more recent post. I just used an external library. Its currently in gcm but can be switched to ccm easily
Jul
13
comment Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
I'm using a 12 byte nonce randomly generated, so thats 2^96 possibilities. And the standard is a probability of collision less than 2^-32. So I believe that is a large enough margin that I may assume no IV will repeat. Given that, would you still go CCM?
Jul
12
comment AES GCM implementation in c#
well at least question 1 is out of the way, thanks
Jul
11
comment Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
Thanks for the advice, I'll follow it