Encrypted data cannot be compressed anyway
Comment on Order
bioemerl@kbin.social 1 year ago
Don't compress encrypted data since it opens you up to attacks like CRIME
Mubelotix@jlai.lu 1 year ago
DrQuint@lemmy.world 1 year ago
It can. Just not lossless. Which it means it can’t.
bastian_5@sh.itjust.works 1 year ago
If that’s true, what’s to stop someone else from just compressing it themself and opening the same attack vector?
harbor9964@lemmy.world 1 year ago
Compressing what themselves? Compress then encrypt leaks information about the data being encrypted if an adversary can affect some part of the data being encrypted. If the data is at rest and repeated encryptions are needed , then this isn’t a concern.
bastian_5@sh.itjust.works 1 year ago
Compress the encrypted data. You’re talking about encrypting compressed data, this was talking about compressing encrypted data.
bioemerl@kbin.social 1 year ago
Technically you would be fine to compress the encrypted data, but encrypted data doesn't compress well so it's not really worth your time