network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 2 months |
| seen | Mar 16 at 20:48 | |
| stats | profile views | 0 |
I am a math/computer nerd. Nothing to see here, move along.
|
Feb 25 |
awarded | Teacher |
|
Feb 25 |
answered | How can I encrypt something user provided without risk of the key being exposed? |
|
Feb 25 |
comment |
How can I encrypt something user provided without risk of the key being exposed? Length-extension attacks apply to hash functions, not encryption algorithms. Standard encryption algorithms (such as CBC) are secure against chosen-plaintext attacks, so in fact they are explicitly designed to be secure in this type of scenario---the ability to encrypt plaintexts of his choosing does not give an attacker information on other ciphertexts. That being said, you should probably provide some more details on what your service is doing and what your threat model is. Crypto.stackexchange.com is probably a better place to ask this question. |
