Upgraded hash function to SHA-384 and MAC to HMAC-SHA-384.

This matches the security level of AES-256 according to NSA Suite B. To
better comply with Suite B we should replace the combination of CTR mode
and HMAC with GCM, which would reduce the MAC size from 48 to 16 bytes.
This commit is contained in:
akwizgran
2012-02-22 13:17:07 +00:00
parent a9d91beaaa
commit 34cd8cddc3
10 changed files with 19 additions and 15 deletions

View File

@@ -19,7 +19,7 @@ public class ErasableKeyTest extends BriarTestCase {
private static final String CIPHER_MODE = "AES/CTR/NoPadding";
private static final int IV_BYTES = 16; // 128 bits
private static final int KEY_BYTES = 32; // 256 bits
private static final String MAC = "HMacSHA256";
private static final String MAC = "HMacSHA384";
private final Random random = new Random();