10 events
when toggle format what by license comment
Jul 8 '20 at 14:00 comment added user80567 @MarcIlunga No I won't try anything as stupid as creating my own custom modes of operation. But this is really an interesting possibility I hadn't thought of. Suppose if I am using my implementation in CBC/OFB/GCM mode (or really any other popular mode except ECB), would there be any sort of attacks that the cloud provider could carry out?
Jul 8 '20 at 13:51 comment added Marc Ilunga Not really an answer but consider this: you mentioned that side channels would not apply since your are doing local operations, therefore no active adversary. But it could still be that you are under attack by an adversary! Imagine that you are encrypting emails with your own crypto, then uploading them to a cloud. However anyone can send you emails, including the cloud provider! So if you went as far as creating a custom mode of operation for AES(since it is not an encryption scheme on its own) you would be exposed to CPA attacks.
Jul 8 '20 at 9:23 history edited user80567 CC BY-SA 4.0
added 5 characters in body
Jul 8 '20 at 9:14 history migrated from security.stackexchange.com (revisions)
Jun 29 '20 at 20:02 comment added reed I guess it's sufficiently secure as long as you don't make serious mistakes (like producing encryption data with obvious patterns) and as long as you are not the target of an advanced attacker
Jun 29 '20 at 19:42 comment added Conor Mancone Remember that security is not a binary proposition. "Is this sufficiently secure?" is an incomplete question, because that can only be answered for your individual use case. "Sufficiently secure" looks completely different for an anonymous cutest-cat-picture voting site than it does for the website used to launch nuclear attacks. If it's your own data you are securing then the question really boils down to, "Is it secure enough for you?".
Jun 29 '20 at 19:38 answer dandavis timeline score: 2
Jun 29 '20 at 18:16 comment added user80567 @gowenfawr Well if the question I linked to belongs to Sec.SE, I guess mine should should too. Not sure though.
Jun 29 '20 at 18:14 comment added gowenfawr This is an interesting question, but one that I think would be better answered on Crypto.SE. How does a crypto implementer reach a level of trust in their implementation of an algorithm?
Jun 29 '20 at 17:56 history asked user80567 CC BY-SA 4.0