146 reputation
5
bio website
location New Jersey
age 19
visits member for 2 years, 3 months
seen Aug 10 at 15:41

Sep
23
awarded  Popular Question
Aug
26
revised Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?
added 274 characters in body; added 5 characters in body; deleted 94 characters in body
Aug
26
awarded  Scholar
Aug
26
awarded  Supporter
Aug
26
accepted Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?
Aug
26
comment Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?
whoops, I got so caught up with RC4 and having to combine the IV and key that I didn't catch my mistake. With AES, I don't even have to re-key the message after each packet, because updating the IV does not require the key to be updated. this should mean i wouldn't have to deal with the AES key scheduler more than once. Thanks for the info anyway!
Aug
26
awarded  Student
Aug
26
comment Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?
oh, and I plan on deploying each process that communicates on this protocol on systems that I administer and that only I have access to. if the key was leaked, hackers could phish the passwords of users who connect to my set of processes, but I would have much bigger problems if they were able to hack into my servers to find the plaintext key on my filesystem.
Aug
26
comment Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?
Thanks! Your response was very 'noob' friendly and I have gained the understanding that 1.) re-keying RC4 after each packet will make it slower than AES, 2.) I should not use one iteration of a hash on a password as a key. I will probably avoid MACs and use encryption instead because it adds no size overhead. As for a key, do you think running a 128-byte array through a pseudo random number generator, and storing the generated value on the server and clients as a key for AES-128 will do the trick, or is this insecure in some way? I don't want to choose 128 values between 0 and 255 by hand!
Aug
26
awarded  Editor
Aug
26
revised Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?
added 326 characters in body
Aug
25
asked Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?