Re: On-Disk Encryption and Data Integrity



Jeffrey Walton <noloader@xxxxxxxxx> writes:

I'd like to use CCM, but neither Crypto++ or the Windows Crypto API
(CAPI) offer it.

Then use generic encrypt-then-authenticate, using a secure message
authentication code, e.g., HMAC-SHA256 or so. Encrypting a hash is not
sufficient.

-- [mdw]
.


Quantcast