101 reputation
1
bio website
location
age
visits member for 2 years, 5 months
seen Sep 16 at 11:04

Jul
27
comment Poor man's SSL - is this method as safe as SSL/TLS?
If you want to combine symmetric cipher and MAC instead of using a authenticated cipher mode, it seems you should use "encrypt-then-mac" which is always secure (as opposed to "mac-then-encrypt" or "encrypt-and-mac" which may in some cases). That is you should send : E(m) || S(E(m)) where E is encrypt and S is MAC as opposed to E(m)||S(m) (encrypt-and-mac)
Jul
18
awarded  Supporter