Firewalls

to be encrypted with the resulting cipher text at most a block size

larger than the plain text. For example, with AES-128 if between

0 and 15 bytes of data need to be encrypted, the resulting cipher text

will be 16 bytes. If between 16 and 31 bytes of data need to be

encrypted, the resulting cipher text will be 32 bytes.

1

16.3 Key management

Key management is a fundamental consideration when deploying a

privacy and authentication solution. If the keys used to protect

sensitive data within an enterprise are not properly secured, attack-

ers may be able to access these data with relative ease. This part of

the chapter discusses some of the considerations ...