3 ms·
Thats pretty neat since you have of the encryption done client side. Which mode of AES do you use?
by zitterbewegung 15y ago
Thats pretty neat since you have of the encryption done client side. Which mode of AES do you use?
- eran 15y agoI use counter mode with 256 bit key Key is generated as sha256 hash of the user password
- tptacek 15y agoThat's also not a secure way of generating an AES key; those crypto keys can be cracked quickly. The problem you're trying to solve is the entire reason for PBKDF2. You should also use SJCL's AES.
- bdhe 15y agoYou should also use SJCL's AES. Here's the link: http://bitwiseshiftleft.github.com/sjcl/ http://bitwiseshiftleft.github.com/sjcl/