Reputation
Next privilege 125 Rep.
Vote down
Badges
1
Newest
 Supporter
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 6 votes cast
Jul
27
comment Poor man's SSL - is this method as safe as SSL/TLS?
If you want to combine symmetric cipher and MAC instead of using a authenticated cipher mode, it seems you should use "encrypt-then-mac" which is always secure (as opposed to "mac-then-encrypt" or "encrypt-and-mac" which may in some cases). That is you should send : E(m) || S(E(m)) where E is encrypt and S is MAC as opposed to E(m)||S(m) (encrypt-and-mac)
Jul
18
awarded  Supporter