I need some guidance here:
assuming I have the following:
(PreSharedKey of 32 bytes) XOR (one time Random Buffer of 32 bytes)
The only way to crack this should be brute forcing, correct? One of the issue in sending out the XORed value is to disclose the PSK length. At this point I could add some random bytes at the end of the XORed value to avoid this (the two ends knows the real PSK len). But does it make sense? Or it would be better to just increase the PSK (and the random buffer) length of the same number of bytes to get more security?
Sorry for the newbie question...