A system for sending messages securely is protected by AES encryption. The AES key is
encrypted using the RSA public key of the message recipient. The RSA-encrypted key and
AES-encrypted message are then delivered to the recipient, who can decrypt the key and
then use it to decrypt the message.
A security analyst reviewing this system comments that combining AES with RSA in this
way is unnecessarily complex. They propose using only the RSA cipher. Is this a sensible
suggestion? Explain your reasoning.
Comments
Leave a comment