3 ms·
I initially disliked the article as well, but I think it makes a fair point about misuse-resistant libraries. Or as you put it, "correct vetted tools". Where a
by regecks 6y ago
I initially disliked the article as well, but I think it makes a fair point about misuse-resistant libraries. Or as you put it, "correct vetted tools".
Where are all the secure hybrid RSA schemes?
I use RSA-OAEP for tiny messages and feel quite good about it. But that's not a general purpose tool. If I had to manually do all the steps to properly combine it with AES for block or streaming encryption, I'd be in danger.
libsodium is seriously ubiquitous and you only really have to worry about nonces.
- will4274 6y agoJWT/JWE/JOSE RFCs have some secure hybrid RSA schemes, with mature libraries. It's typically RSA-OAEP and an AES session key