30 reputation
4
bio website
location
age
visits member for 1 year, 8 months
seen Jun 4 '13 at 13:54

Apr
12
answered Verify Login and Encrypt with PBKDF2
Apr
12
accepted openssl EVP_aes_256_gcm - what's inside?
Apr
12
comment Is OpenSSL AES GCM standardized?
I see, internally they may hash my IV long bytes to 12 bytes. I think I better stick with defaults else this may bite me somewhere down the road. Thank you for your feedback @tom.
Apr
12
comment Is OpenSSL AES GCM standardized?
That is not what I see during my openssl tests. Increasing IV length (substring of fixed iv bytes) produces different CTEXT. Even IV lengths longer than 32bytes are accepted.
Apr
12
awarded  Scholar
Apr
12
accepted Is OpenSSL AES GCM standardized?
Apr
12
comment Is OpenSSL AES GCM standardized?
The openssl defaults are setup for TSL, e.g, IV len defaults to 12 bytes. Should/could I set IV length to 16 or 32 to make things 'safer' ?
Apr
12
awarded  Supporter
Apr
12
asked Is OpenSSL AES GCM standardized?
Apr
12
asked openssl EVP_aes_256_gcm - what's inside?
Apr
11
comment Verify Login and Encrypt with PBKDF2
"Encrypt the configuration file with AES-128-CBC, using K1 as key and K2 as IV. Call the result C (the encrypted file)." In this scheme this fixates IV, next encryption with same password yields same IV. Should we rather have random IV every time ?
Apr
10
comment Does the HMAC of symmetric key revealed weakens the encryption?
thank you for the hint, I did not realize the important diff between MAC and md5/sha1 is the MAC is keyed hash. I will do the Encrypt-then-MAC scheme. I am using openssl library.
Apr
10
awarded  Student
Apr
10
asked Does the HMAC of symmetric key revealed weakens the encryption?
Apr
8
awarded  Teacher