6 reputation
1
bio website
location
age
visits member for 11 months
seen Sep 18 '13 at 12:18

Oct
2
awarded  Student
Sep
18
comment Proper way of doing encryption and authentication (PBKDF2 + AES)
The derived keys will only be used to encrypt that single file. However, there will be more files encrypted, but those will have random keys and IVs, and plaintext of "random" length (1B -> ~5MB). What is the suggested AES256 mode?
Sep
17
comment Proper way of doing encryption and authentication (PBKDF2 + AES)
Oh, and what about salts for HKDF? They seem to be strongly suggested.
Sep
17
comment Proper way of doing encryption and authentication (PBKDF2 + AES)
(and SRP is the way to go for authentication? A "simpler" zero-knowledge solution for the server would be nicer of course, but..)
Sep
17
comment Proper way of doing encryption and authentication (PBKDF2 + AES)
@CodesInChaos So, I should just use PBKDF2 initially (password + username as salt?), and run the expand like 4 times with various string-based identifiers? E.g. -"aes", "iv", "hmac", and "srp-secret". Since this should solve the SRP thing also. So the username and the SRP secret (and a random salt for the SRP) is the only thing the server will ever have, and should never be able to speed up/deduce anything regarding the key (or even IV).
Sep
17
comment Proper way of doing encryption and authentication (PBKDF2 + AES)
@nightcracker HTTPS. Probably with some pinning.
Sep
17
asked Proper way of doing encryption and authentication (PBKDF2 + AES)