4 ms·
3. They should be authenticated. To OP, I would suggest using secretstream from libsodium, which abstracts all these problems away for you.
by trulyrandom 7y ago
3. They should be authenticated.
To OP, I would suggest using secretstream from libsodium, which abstracts all these problems away for you.
- CiPHPerCoder 7y ago> 3. They should be authenticated. I covered that: > Furthermore, not authenticating your ciphertext means padding oracle attacks can be launched against the app. The list above was just the requirements for the initialization vector, not the list of problems with the code.
- trulyrandom 7y agoRight, but I was specifically talking about authenticating the IV.