0
$\begingroup$

I'm working on an app and need to encrypt some structured data. The data will be turned into a string form (JSON) before getting encrypted.

The data format I'm using will always start with a { character and end with a } character. Does this make encryption less secure? Are there any methods for more securely encrypting a JSON string?

Improve this question
$\endgroup$
1
  • 3
    $\begingroup$ PGP should work just fine. It is meant to take any sort of data as input and securely encrypt it. $\endgroup$
    – mikeazo
    Commented May 2, 2015 at 1:24

1 Answer 1

Reset to default
3
$\begingroup$

There are no known-plain-text-attacks known for the symmetric encryption protocols used by OpenPGP with the OpenPGP CFB mode in use, so you can safely rely on it.

In the end, the very first few bytes of OpenPGP packets are generally rather easily guessable by design, as they usually introduce a compression-packet and literal (data) packet with either very small parameter ranges each -- and this is not considered a problem for OpenPGP but for some very esoteric and hardly usable adaptive cypertext attack relying on a decryption oracle, that is partially exploiting this.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.