|visits||member for||1 year, 7 months|
|seen||Oct 8 '13 at 13:32|
Developer for C, Perl, Python, PHP, Java. Working for an ISP in the access and VoIP department.
Assymetric password encryption - Viable? Which algorithm?
Thanks for your answer (and sorry for the long delayed reply). Sure, Padding is mandatory, the OpenSSL docs recommend RSA_PKCS1_OAEP_PADDING. I could not find a good source that Elgamal requires less bits, and for Elgamal we would need gcrypt, which has an even more awkward API than OpenSSL, so we will go with RSA. I do not see an advantage of hybrid encryption, the length of the output of the RSA encryption is as long as its key, regardless of the input. The weak point of all this is the server with the private key, yes, but this secures intermediate storage, which is a big plus for us