• @[email protected]
      link
      fedilink
      321 year ago

      Encrypt then sign. Always authenticate before any other operations like decryption. Don’t violate the cryptographic doom principle.

    • @[email protected]
      link
      fedilink
      English
      301 year ago

      Encrypt then sign. Verification is often much faster than (or at worst as fast as) decryption. Signature can also be verified without decryption key, making it possible to verify the data along the way.