(12-04-2019, 05:54 AM)venam Wrote:

(12-04-2019, 05:49 AM)z3bra Wrote: Thus block chain stuff you describe seems complicated. Can it be implemented easily and without too much effort?

You can rely on the crypto library you are using to do the heavy lifting. It's probably just some parameter that you give to AES.
My idea is that you should probably chain the values so that chunks in memory can't be decrypted by themselves alone. However, that's going to be more expensive as you'll need to pass through the blocks to get to the required value.
https://en.wikipedia.org/wiki/CBC-MAC

This looks interresting indeed, I like the idea that chunks of memory can't be decrypted alone. It could be problematic on small devices though, or when you have "big secrets" (namely, big data to encrypt in your safe).
Even if I don't use that yet, I'll probably think about it when designing the tool so it can be added later.

Which library would you use btw, for simple encryption? I tried to lookup libressl, but I couldn't find any documentation about using it for simple use cases (typically, take a string as input, another string as a key, and produce an encrypted output).
Any pointers?