118 reputation
4
bio website
location Montevideo, Uruguay
age 24
visits member for 1 year
seen Sep 15 at 11:44

Juan Andrés Diana


Aug
28
awarded  Scholar
Aug
28
accepted Generating an IV for ESP 3DES-CBC
Aug
25
comment Generating an IV for ESP 3DES-CBC
Some comments: 1. The first option seems nice because I would not need a random number generator, but I have doubts about the fixed IV. By saying fixed you mean hard-coded on the client code? Is it alright to be known to everyone? Using the ESP sequence number seems better. 2. I'm considering message integrity, yes. I'm aware of the problems with using ESP encryption only. 3. Thanks for the heads up on the RFC, I'm implementing client code only. On section 3 of the RFC 2451, I noticed that it says "The IV MUST be chosen at random".
Aug
25
awarded  Student
Aug
25
awarded  Editor
Aug
25
revised Generating an IV for ESP 3DES-CBC
added 848 characters in body
Aug
25
asked Generating an IV for ESP 3DES-CBC
Aug
25
awarded  Autobiographer