4 ms·
You mention "military-grade AES". Are you referring to AES-256? These terms are generally frowned upon (cf. http://www.schneier.com/crypto-gram-9902.html#snakeo
by bdhe 16y ago
You mention "military-grade AES". Are you referring to AES-256? These terms are generally frowned upon (cf. http://www.schneier.com/crypto-gram-9902.html#snakeoil http://www.schneier.com/crypto-gram-9902.html#snakeoil)
Also, you should be using a MAC rather than a checksum. Finally, you mention using a random hashx that links to the wikipedia article on checksum. You are better off using a Password-Based Key-Derivation Function (PBKDF2, if you're using AES).
- lighthazard 16y agoSo we should just mention how strong it is and remove the term "militar-grade AES" ? Sounds good. Thanks for the advice on using MAC instead of a checksum, we're currently using HMAC-SHA1. Thanks for the terminology help, we will be using PBKDF2 now for our encryption key. Thank you!