I did not suggest a PR for security related issues but for lacking featues, which is perfectly normal. I understand that you know crypto extremely well but ho

I did not suggest a PR for security related issues but for lacking featues, which is perfectly normal. I understand that you know crypto extremely well but how can you say "It's unauthenticated CBC. That's completely broken." ? Using CBC without authentication is certainly broken but that only means you have to use a MAC with CBC. A MAC is NOT part of CBC and lack of MAC usage is a criticism that has nothing to do with their CBC implementation. > They're not saying AEAD has anything to do with PFS. They're saying that the only encryption they have is (at best) the AEAD, without a kex. If that'a what they meant then it makes sense. I read it as if AEAD was thought of by them as an alternate to PFS.