On 27.07.22 01:19, Jacob Champion wrote:
Now, if we don't have a padding system
built into the feature, then that does put even more on the user; it's
hard to argue with that.
Right. If they can even fix it at all. Having a well-documented padding
feature would not only help mitigate that, it would conveniently hang a
big sign on the caveats that exist.
I would be interested in learning more about such padding systems. I
have done a lot of reading for this development project, and I have
never come across a cryptographic approach to hide length differences by
padding. Of course, padding to the block cipher's block size is already
part of the process, but that is done out of necessity, not because you
want to disguise the length. Are there any other methods? I'm
interested to learn more.
