network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 10 months |
| seen | Apr 12 at 9:45 | |
| stats | profile views | 0 |
|
Jul 27 |
comment |
Poor man's SSL - is this method as safe as SSL/TLS? If you want to combine symmetric cipher and MAC instead of using a authenticated cipher mode, it seems you should use "encrypt-then-mac" which is always secure (as opposed to "mac-then-encrypt" or "encrypt-and-mac" which may in some cases). That is you should send : E(m) || S(E(m)) where E is encrypt and S is MAC as opposed to E(m)||S(m) (encrypt-and-mac) |
|
Jul 18 |
awarded | Supporter |
