Top tag
Next privilege 15 Rep.
Flag posts
~343 people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
comment Asymmetric password encryption - Viable? Which algorithm?
Thanks for your answer (and sorry for the long delayed reply). Sure, Padding is mandatory, the OpenSSL docs recommend RSA_PKCS1_OAEP_PADDING. I could not find a good source that Elgamal requires less bits, and for Elgamal we would need gcrypt, which has an even more awkward API than OpenSSL, so we will go with RSA. I do not see an advantage of hybrid encryption, the length of the output of the RSA encryption is as long as its key, regardless of the input. The weak point of all this is the server with the private key, yes, but this secures intermediate storage, which is a big plus for us