News for hackers. Stuff that matters.

A comment on I worked at LastPass as an engineer. My 2 cents on the situation. Parent comment

Re:I worked at LastPass as an engineer. My 2 cents on the si... by tptacek on Wednesday December 28, 2022 @04:01PM (#34165903)
Missing or duplicating a block anywhere in a ciphertext should completely prevent decryption; that's how authenticated encryption works. The idea that some cipher modes are more or less resilient to corruption is, for the most part, a discredited 1990s idea.
[ Parent | on HN ]
Re:I worked at LastPass as an engineer. My 2 cents on the si... by robryk on Thursday December 29, 2022 @09:18AM (#34172774)
In this setup we want to be able to decode a cipherstream with holes into a plainstream with holes. This is very much possible with CTR-MAC, as long as MAC is done on some finitely-sized segments.
[ Parent | on HN ]
Re:I worked at LastPass as an engineer. My 2 cents on the si... by tptacek on Thursday December 29, 2022 @01:33PM (#34176068)
That is a problem that is generally handled at a higher level than the block cipher mode.
[ Parent | on HN ]