我在哪里768,16存储加密记录的工具变量？ [英] Where shoud I store the IVs for encrypted records?

问题描述

我想在我将它们存储在我的数据库加密一些机密数据。 RijndaelManaged的似乎是一个很好的选择，但如果我没有理解好，我需要生成一个新的IV为每一次当我的东西进行加密。所以，我应该在哪里存储这些？难道来连接的初始化向量和加密值是一个好主意？

I'd like to encrypt some secret data before I store them in my database. RijndaelManaged seems a good option for this, but if I understand well, I need to generate a new IV for every single time when I encrypt something. So, where should I store these? Is it a good idea to concatenate the initialization vector and the encrypted value?

推荐答案

IV是不是秘密，你可以存储任何你喜欢的。你可以肯定它存储在密文的面前。

The IV is not secret, you can store it anywhere you like. You can certainly store it in front of the ciphertext.

这是一个好主意，有一个四，太，虽然它在某些密码模式可选。因为它减轻了在某些情况下一些攻击我会用它只要有可能。 外行像我们这样的密码学家应该发挥它非常安全的。

It is a good idea to have an IV, too, although it is optional in some cipher modes. I would use it whenever possible because it mitigates some attacks in certain situations. "Layman" cryptographers like us should play it very safe.

这篇关于我在哪里768,16存储加密记录的工具变量？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！