Re: Short Hash codes
From: Mark Wooding (mdw_at_nsict.org)
Date: 05/14/03
- Next message: Michael Amling: "Re: Short Hash codes"
- Previous message: Colin Andrew Percival: "Re: RSA mathematical question"
- In reply to: Andrew Swallow: "Re: Short Hash codes"
- Next in thread: John E. Hadstate: "Re: Short Hash codes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 14 May 2003 15:53:05 GMT
Andrew Swallow <am.swallow@eatspam.btinternet.com> wrote:
> The other thing you can do is encrypt the data and the hash. If
> you use a block cipher with a 128 bit Key Variable (e.g. AES)
> then any data transmitted, stored on a disk or in a database
> becomes much harder to fake. Make sure that the Key Variable
> cannot be compromised.
That's obviously a nonstarter if the OP is as space-limited as he
claims: you need somewhere to put an IV if you're going to use a block
cipher and expect some kind of security.
(If the transport for the messages is reliable, then you might be able
to get away with implicit IVs, generated by some counter or PRNG that
each party initializes during session setup and steps appropriately. I
don't think this is such a bright idea, though.)
-- [mdw]
- Next message: Michael Amling: "Re: Short Hash codes"
- Previous message: Colin Andrew Percival: "Re: RSA mathematical question"
- In reply to: Andrew Swallow: "Re: Short Hash codes"
- Next in thread: John E. Hadstate: "Re: Short Hash codes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
