@[email protected] to Programmer [email protected] • 11 months agoOrderprogramming.devmessage-square48fedilinkarrow-up1567
arrow-up1555imageOrderprogramming.dev@[email protected] to Programmer [email protected] • 11 months agomessage-square48fedilink
minus-square@[email protected]linkfedilink24•11 months agoThe real question is do you encrypt-and-sign or sign-and-encrypt?
minus-square@[email protected]linkfedilink32•11 months agoEncrypt then sign. Always authenticate before any other operations like decryption. Don’t violate the cryptographic doom principle.
minus-square@[email protected]linkfedilinkEnglish30•11 months agoEncrypt then sign. Verification is often much faster than (or at worst as fast as) decryption. Signature can also be verified without decryption key, making it possible to verify the data along the way.
The real question is do you encrypt-and-sign or sign-and-encrypt?
Encrypt then sign. Always authenticate before any other operations like decryption. Don’t violate the cryptographic doom principle.
Encrypt then sign. Verification is often much faster than (or at worst as fast as) decryption. Signature can also be verified without decryption key, making it possible to verify the data along the way.