3 ms·
Off the top of my head, NIST was suggesting something like 8GB as the working limit. It would depend on your risk tolerance and the application in practice I gu
by upofadown 9mo ago
Off the top of my head, NIST was suggesting something like 8GB as the working limit. It would depend on your risk tolerance and the application in practice I guess. For something like video you might not really care about exposing a few 8 byte blocks here and there where the exposure is one block XORed with the other.
- fc417fc802 9mo agoAn aside, personally I quite like TDES for the purpose of generating secure handles and the like. The larger block sizes of pretty much every other common algorithm yield URLs and integers that are more difficult to work with. 64 bits is a manageable enough length and you don't have to implement the algorithm yourself (at which point you'd have rolled your own crypto).
- tptacek 9mo agoFurther aside, note that there are constructions designed specifically for that problem and its relatives: https://www.cs.ucdavis.edu/~rogaway/papers/subset.pdf https://www.cs.ucdavis.edu/~rogaway/papers/subset.pdf