4 ms·
With this logic Signal is a "heuristic for bad cryptography" because it uses CBC. Although I admit that GNU does not have a great track record.
by dependenttypes 6y ago
With this logic Signal is a "heuristic for bad cryptography" because it uses CBC. Although I admit that GNU does not have a great track record.
- some_furry 6y agoSignal uses AES-CBC + HMAC-SHA2 in encrypt-then-MAC. If Signal used unauthenticated CBC mode, it would be bad cryptography. Reference: https://soatok.blog/2020/07/12/comparison-of-symmetric-encryption-methods/#aes-gcm-vs-aes-cbc https://soatok.blog/2020/07/12/comparison-of-symmetric-encry...