1
$\begingroup$

Let's say I have a secure AEAD-scheme like ChaCha20/HMAC and my encrypted blobs need to match a fixed size:

Is it OK to apply some padding to my plaintext to match the block-size?

Can I use any reversible padding or should it provide some special properties?


The required ciphertext properties are:

  • privacy
  • integrity
  • indistinguishability from random data
$\endgroup$

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.