« first day (2680 days earlier)      last day (1990 days later) » 

forest
forest
3:51 AM
I think it's just that you're noticing it more. I mean, people don't often specify that they need to encrypt large messages, so you let that out of your mind, and only notice when people specify that it needs to be small.
If you were to compare the amount of people who want to encrypt non-small messages and those who want to encrypt small messages, chances are the former would outnumber the latter by quite a bit.
 
 
17 hours later…
kelalaka
kelalaka
8:32 PM
As a trivial example, consider a secure MAC where the first bit of the tag is
always equal to the first bit of the message.
How this can be secure MAC?
 
SEJPM
SEJPM
@kelalaka MACs don't have to hide the message
 
kelalaka
kelalaka
Ah. Ok.
 
SEJPM
SEJPM
@kelalaka in fact even HMAC leaks info about the plaintext, as it's deterministic
so if you do E(M) || HMAC(M), you'll leak whether your M's are equal
even if E is CPA-secure
 
kelalaka
kelalaka
yes
 
kelalaka
kelalaka
8:54 PM
@SEJPM Thanks.
 

« first day (2680 days earlier)      last day (1990 days later) »