I need to encrypt something on a smartphone. The data is relatively small and would be stored encrypted on the phone.
I was thinking AES-GCM with a key generated by a password (chosen by the app's user), but I wonder if there is a risk, with Authenticated encryption, that an attacker could use the MAC as an oracle in order to brute-force the password from which the key is derivated.
What is your opinion about this ? Should I stay away from Authenticated Encryption when using Password-based derivated keys ?
Thank you for your feedback.