And of course you must avoid using this construction yourself because it involves you designing your own cryptographic construction.
You are actually more likely to have your system broken by making a new construction out of well-known pieces like AES and SHA1 than you would be if you made your own crypto primitives out of whole cloth. And you'd never think of designing your own block cipher.
Hey, I like that argument! I think I'll repeat it ad nauseum from now on.
You are actually more likely to have your system broken by making a new construction out of well-known pieces like AES and SHA1 than you would be if you made your own crypto primitives out of whole cloth. And you'd never think of designing your own block cipher.
Hey, I like that argument! I think I'll repeat it ad nauseum from now on.