140 reputation
4
bio website github.com/jbtule
location St. Louis, MO
age
visits member for 3 years, 1 month
seen 2 days ago

twitter: @jbtule


Mar
29
awarded  Critic
Mar
29
awarded  Editor
Mar
29
revised Questions to hybrid encryption. RSA with AES
added 2 characters in body
Mar
29
comment Questions to hybrid encryption. RSA with AES
@user2104146, 1) That is incorrect, each block only depends on the immediate previous block only. 2) Yes 3) your question states "I want to use a hybrid encryption in my application" and if your goal is learning I suggest Cryptography I. 4) It's not about really as much about hashing the plaintext leaking the data, it's about later when verifying before acting on the plaintext, which thanks to padding that's easiest if you sign the ciphertext. There is nothing wrong with a sha1 fingerprint of the public key, plus it's the public key.
Mar
29
answered Questions to hybrid encryption. RSA with AES
Mar
29
comment Questions to hybrid encryption. RSA with AES
Like I said granted there are few alternatives, in most cases you have to roll your own usage there's no other option, but the encryption primatives themselves aren't generally exploited these days, it's the usage, padding, verification timing, predictable random numbers, impromper IV uses, improper modes, improper keys, the above code doesn't even include the decryption/verification which is much more perilous for mistakes. The definition for roll your own these days isn't implementing AES or RSA, no one does that, libraries are plentiful, it's implementing the usage of AES or RSA.
Mar
29
comment Questions to hybrid encryption. RSA with AES
SignHash signs a precomputed hash, SignData computes the hash and signs it.
Mar
29
comment Questions to hybrid encryption. RSA with AES
@AJHenderson because of the prevalence of side channel attacks, and the prevalance of usage mistakes, just using established algorithms is still rolling your own, but granted there are only a few high level opensource alternatives. gpgme, nacl, and keyczar.
Feb
20
comment AES for key encryption
I've fully ported Keyczar to C# for that reason.
Feb
20
comment Lessons learned and misconceptions regarding encryption and cryptology
For a high level option for .net I've ported keyczar to C#.
Apr
25
awarded  Supporter
Mar
2
awarded  Teacher
Mar
1
answered Is PBKDF2-based System.Cryptology.RFC2898DeriveBytes() “better” for Unicode Password hashing than traditional methods?