Let's say I have a secure AEAD-scheme like ChaCha20/HMAC and my encrypted blobs need to match a fixed size:

Is it OK to apply some padding to my plaintext to match the block-size?

Can I use any reversible padding or should it provide some special properties?

The required ciphertext properties are:

  • privacy
  • integrity
  • indistinguishability from random data


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.