2 ms·

Thanks. So, AES-CBC + HMAC would prevent this, but AES-CBC does not. How do the following methods compare when using constant IV? AES-CBC + HMAC (encrypt then

Thanks. So, AES-CBC + HMAC would prevent this, but AES-CBC does not. How do the following methods compare when using constant IV? AES-CBC + HMAC (encrypt then MAC) vs AES-GCM-SIV vs AES-SIV

some_furry 3y ago
Be careful how you combine these components: https://soatok.blog/2021/07/30/canonicalization-attacks-against-macs-and-signatures/ https://soatok.blog/2021/07/30/canonicalization-attacks-agai... (The linked article talks about CTR + HMAC, but CBC + HMAC is also affected.)