Kannan Goundan
  • Member for 3 years, 9 months
  • Last seen more than a month ago
What are the popular modes-of-operation (AES-GCM, AES-SIV, AES-GCM-SIV, etc.) geared for?
3 votes

I went through this decision process in 2018 and ended up going with something very conservative: encrypt-then-MAC with AES-256-CBC and HMAC-SHA-512 truncated to 256 bits. Why SHA-512 over SHA-256? ...

View answer