1

Is there a standardized padding scheme which is prefix instead of postfix and that uses random bytes except for the first byte which would be the length of the padding?

otus
  • 32,462
  • 5
  • 75
  • 167
daruma
  • 385
  • 3
  • 13

1 Answers1

2

I know of no standard like that and also doubt it exists.

It would have similar disadvantages as random padding at the end, which is no longer in use: subliminal channel, consumption of randomness which may be expensive. Additionally, it would require knowing the message length in advance, which is a practical limitation.

otus
  • 32,462
  • 5
  • 75
  • 167