4 ms·
Signal uses AES-CBC + HMAC-SHA2 in encrypt-then-MAC. If Signal used unauthenticated CBC mode, it would be bad cryptography. Reference: https://soatok.blog/202
by some_furry 6y ago
Signal uses AES-CBC + HMAC-SHA2 in encrypt-then-MAC.
If Signal used unauthenticated CBC mode, it would be bad cryptography.
Reference: https://soatok.blog/2020/07/12/comparison-of-symmetric-encryption-methods/#aes-gcm-vs-aes-cbc https://soatok.blog/2020/07/12/comparison-of-symmetric-encry...