On validating Curve25519 public keys, by @veorq https://research.kudelskisecurity.com/2017/04/25/should-ecdh-keys-be-validated/ …
-
the design problem of cbc mac-then-encrypt is that this is not possible.
The point is that crypto is subtle enough that you can't give blanket advice like "check your inputs". A bad check can be worse than none.
-
-
but this subtle problem only happens with flawed cipher modes. Use proper cipher modes: you can go back to blanket advice.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.