@[email protected] to Programmer [email protected] • 2 years agoOrderprogramming.devmessage-square47fedilinkarrow-up1567
arrow-up1555imageOrderprogramming.dev@[email protected] to Programmer [email protected] • 2 years agomessage-square47fedilink
minus-square@[email protected]linkfedilink24•2 years agoThe real question is do you encrypt-and-sign or sign-and-encrypt?
minus-square@[email protected]linkfedilink32•2 years agoEncrypt then sign. Always authenticate before any other operations like decryption. Don’t violate the cryptographic doom principle.
minus-square@[email protected]linkfedilinkEnglish30•2 years agoEncrypt then sign. Verification is often much faster than (or at worst as fast as) decryption. Signature can also be verified without decryption key, making it possible to verify the data along the way.
The real question is do you encrypt-and-sign or sign-and-encrypt?
Encrypt then sign. Always authenticate before any other operations like decryption. Don’t violate the cryptographic doom principle.
Encrypt then sign. Verification is often much faster than (or at worst as fast as) decryption. Signature can also be verified without decryption key, making it possible to verify the data along the way.