4 ms·
"a serious documentation flaw" The all-zeroes IV is documented in the official CCCrypt(3cc) man page at: http://developer.apple.com/library/ios/#documentation
by program 15y ago
"a serious documentation flaw"
The all-zeroes IV is documented in the official CCCrypt(3cc) man page at:
http://developer.apple.com/library/ios/#documentation/System/Conceptual/ManPages_iPhoneOS/man3/CCCryptor.3cc.html http://developer.apple.com/library/ios/#documentation/System...
this does not exonerate Apple having made a wrong choice of design.
- marshray 15y agoYes, it does. (IMHO) A low-level API is not the thing to design your cryptographic protocol around. A low-level crypto API is not prescriptive, it's documentation is merely descriptive. Apple devs were merely documenting and unit testing what happens when you pass in a certain combination of parameters.