7 ms·
You're right, crypto bugs are discovered in software all the time. However, many of these bugs rely on highly active attacks, oracles, etc. Very few allow offli
by problems 9y ago
You're right, crypto bugs are discovered in software all the time. However, many of these bugs rely on highly active attacks, oracles, etc. Very few allow offline decryption, For that you'd have to do something incredibly stupid and easy to catch like reuse the same key and IV for multiple messages. Higher level cryptography libraries like nacl prevent these concerns almost entirely.