4 ms·
Just took a quick look at the crypto implementation. It uses AES-256 in CBC mode but..... without an authentication tag (HMAC).
by rickette 10y ago
Just took a quick look at the crypto implementation. It uses AES-256 in CBC mode but..... without an authentication tag (HMAC).
- mikeycgto 10y agoAlso known as "The Cryptographic Doom Principle". https://moxie.org/blog/the-cryptographic-doom-principle/ https://moxie.org/blog/the-cryptographic-doom-principle/
- Cyphase 10y agoI hadn't come across that post that I can remember; a very nice explanation by Moxie. Thanks.
- beefsack 10y agoThere is an official (albeit experimental) NaCl implementation for Go which would probably have both been simpler and stronger to use: https://godoc.org/golang.org/x/crypto/nacl https://godoc.org/golang.org/x/crypto/nacl
- miovoid 10y agoWe are working on AES-GCM encryption.
- tptacek 10y agoWhy did you use CBC? It's actually harder than crypto/cipher.AEAD, and what you're doing now seems insecure.