Typing the Letters A-E-S Into Your Code (2009)

Re:Typing the Letters A-E-S Into Your Code (2009) by icanhasfay on Friday January 09, 2015 @10:02PM (#8865719)

Obligatory Doom principle link. http://www.thoughtcrime.org/blog/the-cryptographic-doom-prin...

Encrypt Then Authenticate, dammit!

[ Parent | on HN ]

Re:Typing the Letters A-E-S Into Your Code (2009) by meowface on Friday January 09, 2015 @10:08PM (#8865733)

Or, from the inverse perspective: always authenticate and/or verify the integrity of data before processing it at all, whether that processing be decryption, string manipulation, or otherwise.

[ Parent | on HN ]

Re:Typing the Letters A-E-S Into Your Code (2009) by StavrosK on Saturday January 10, 2015 @02:55AM (#8866273)

Which you can't do if the MAC is within the encrypted message.

[ Parent | on HN ]

Re:Typing the Letters A-E-S Into Your Code (2009) by meowface on Saturday January 10, 2015 @03:07AM (#8866288)

Of course. EtM is the only way to go. Just saying it can be applied to other areas, too.

[ Parent | on HN ]