4 ms·
Are you saying that compressed data should not be encrypted? We are trying to limit the amount of data we have to store in the backend K/V store. Can you provid
by kelseyhightower 12y ago
Are you saying that compressed data should not be encrypted? We are trying to limit the amount of data we have to store in the backend K/V store. Can you provide links so I can read up on this. Thanks.
- somethingnew 12y agoExactly, the wikipedia articles for BREACH and CRIME are good starting points if nothing else. [1] http://en.wikipedia.org/wiki/BREACH_(security_exploit) http://en.wikipedia.org/wiki/BREACH_(security_exploit) [2] http://en.wikipedia.org/wiki/CRIME http://en.wikipedia.org/wiki/CRIME
- tedunangst 12y agoDo not compress chosen and/or known plaintext. The compression ratio alone reveals information about the data. i.e., how similar the unknown data is to the known data. > compressed data should not be encrypted? That's really tricky to answer simply. "No" might be taken to mean you should store compressed data unencrypted, which would be much worse. Nor do you have to decompress already compressed data before encrypting. But if somebody hands you data to encrypt and store, don't compress it as part of the encrypting phase.