New answers tagged

1

Yes, the IV and the auth tag can be sent in plain. The auth tag is a tag the recipient can use to verify that the message has not been altered. This is important because AES-GCM acts as a stream cipher and anyone could flip bits. The IV is not a secret, the only thing to be concerned about is that it must not be reused with the same key. I can however not ...


2

You seem dangerously confused about this whole topic, so I'm going to answer the question as asked, and then a few others you might have meant (or should have meant), and explain what's going on and what you should actually do. You asked: How safe is AES 256bitkey encoded in HEX, Base64? Exactly as safe as any other data stored in the same place or ...


4

Assuming the RSA key was of sufficient size, it would not degrade the encryption meaningfully. RSA does not lend itself easily to batch attacks. Of course, there is still the concern that those 100 different people all have access to the key, so all it takes is one person to be compromised to compromise the other 99. But from a purely cryptographic ...


Top 50 recent answers are included