6 reputation
1
bio website catfishwebworks.com
location
age
visits member for 1 year, 5 months
seen Jul 25 at 13:03

Jul
1
awarded  Student
Jun
10
comment Prepend information about encryption implementation to the stored data
@steve_clay i would have asked that, however i did not know if it was even commonplace/acceptable to do it.
Jun
9
comment Prepend information about encryption implementation to the stored data
Regarding your final point, the key is salted before it is stretched, so the cipher key, mac key, and iv are all unique to that use. Is this still an issue? I can generate a random IV per use, however i found some resources that show that not including the IV in the output can be more secure.
Jun
8
comment Prepend information about encryption implementation to the stored data
The IV is derived from the key using key-stretching, so there is reason to store it. (and i'd assume no reason to include it in the mac either, as the key is already included)
Jun
8
asked Prepend information about encryption implementation to the stored data