Timeline for Key generation for AES-GCM-256 file encryption
Current License: CC BY-SA 4.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 10, 2018 at 12:35 | comment | added | FineJoe | (1) There's a reason for SHA256ing passwords: In my context it is vital that passwords supplied via user input and passwords supplied via key files are interchangeable. I.e. suppose a password is "Foobar" - it must not matter whether the users enters it a password or provides "Foobar" as key file content. The only way to achieve this, in my eyes, is to pre-hash passwords AS WELL as key files. Since key files get hashed in chunks, the hash function must be Merkle–Damgård-based and fast. (2) I will look into this. (4) I forgot: The filename (encrypted) IS included in the encrypted file. | |
| Sep 10, 2018 at 12:23 | history | answered | mat | CC BY-SA 4.0 |