enchive icon indicating copy to clipboard operation
enchive copied to clipboard

Published 20 hours ago • verified publisher icon skeeto

Encrypt-then-MAC

Open taoeffect opened this issue 6 years ago • 1 comments

MAC-then-Encrypt has resulted in serious problems in other tools and protocols. It intuitively makes sense why that would be. You're willingly allowing data to be tampered with and for that tampering to go unnoticed. That's a serious problem. Why risk that at all if you could choose to not take such an unnecessary risk?

Reopened from: https://github.com/skeeto/enchive/issues/19

taoeffect avatar Jul 13 '18 18:07 taoeffect

The concern expressed here is covered in detail in a post titled “The Cryptographic Doom Principle”, which also discusses attacks, and goes over issues with SSH.

taoeffect avatar Jul 13 '18 19:07 taoeffect