danhab99@programming.dev to Programmer Humor@programming.dev · 1 year agoOrderprogramming.devimagemessage-square47fedilinkarrow-up1569arrow-down112
arrow-up1557arrow-down1imageOrderprogramming.devdanhab99@programming.dev to Programmer Humor@programming.dev · 1 year agomessage-square47fedilink
minus-squarekoper@feddit.nllinkfedilinkarrow-up24·1 year agoThe real question is do you encrypt-and-sign or sign-and-encrypt?
minus-squareEufalconimorph@discuss.tchncs.delinkfedilinkarrow-up32·1 year agoEncrypt then sign. Always authenticate before any other operations like decryption. Don’t violate the cryptographic doom principle.
minus-squaretvbusy@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up30·1 year agoEncrypt then sign. Verification is often much faster than (or at worst as fast as) decryption. Signature can also be verified without decryption key, making it possible to verify the data along the way.
The real question is do you encrypt-and-sign or sign-and-encrypt?
Encrypt then sign. Always authenticate before any other operations like decryption. Don’t violate the cryptographic doom principle.
Encrypt then sign. Verification is often much faster than (or at worst as fast as) decryption. Signature can also be verified without decryption key, making it possible to verify the data along the way.