4 ms·
What should be the default?
by deedubaya 10y ago
What should be the default?
- stouset 10y agoAES-128-GCM (or ChaCha20-Poly1305 if you're feeling particularly hipster) with a new, random IV every time data is encrypted.
- technion 10y agoIt only addresses half the problem, but Ruby's own man page has a bolded warning: http://ruby-doc.org/stdlib-2.4.0/libdoc/openssl/rdoc/OpenSSL/Cipher.html http://ruby-doc.org/stdlib-2.4.0/libdoc/openssl/rdoc/OpenSSL... Always create a secure random IV for every encryption of your Cipher