New answers tagged

0 votes

Is using weak random numbers for the initialization vector of AES just a theoretical issue?

You usually need two random primes a and b. There was a case where the software creating private keys used the same a and b for two keys leading to duplicated private keys, which is not a big problem. ...
  • 2,107
2 votes
Accepted

Is using weak random numbers for the initialization vector of AES just a theoretical issue?

In this case, you're using CBC, which requires an unpredictable IV, so this is a security vulnerability. To quote Wikipedia: If an attacker knows the IV (or the previous block of ciphertext) before ...
  • 8,795
1 vote

Java Cryptography classes - program agnostic usage

Standard support In general the JCA implements well specified algorithms. The trick is to use those algorithms both for your Java and for the other languages. You may want to map specific algorithms ...
3 votes
Accepted

Encrypted semantic search

Is it possible? Yes, distance-preserving encryption is theoretically possible. But without delving too deep into the mathematics of the thing, this also weakens security on the encryption unless you ...
  • 22.7k
0 votes

Terminology for exchanging one piece of signed information for another

The purpose of the signed data can be set using the "additional data" in AEAD ciphers, and partially in the audience field in a JWT. Is there a better name for such a field? This mechanism ...
  • 28.9k

Top 50 recent answers are included