4 ms·
https://github.com/fernet/spec/blob/master/Spec.md https://github.com/fernet/spec/blob/master/Spec.md It's just a simple format specification using standard cr
by googlryas 3y ago
https://github.com/fernet/spec/blob/master/Spec.md https://github.com/fernet/spec/blob/master/Spec.md
It's just a simple format specification using standard crypto primitives.
> AES in CBC mode with a 128-bit key for encryption; using PKCS7 padding.
> HMAC using SHA256 for authentication.
- hashstring 3y agoWhat is it then really? This sounds like a wrapper function…
- woodruffw 3y agoIt’s a high-level interface for authenticated encryption. Calling it an algorithm is like calling HTTP an algorithm; it’s true in the most useless sense.
- nneonneo 3y agoYep, it's a wrapper around some cryptographic primitives that is fairly misuse-resistant. It's not hard to screw up using the individual primitives in such a way that you lose the desirable cryptographic properties (for example, not authenticating the IV, making the plaintext vulnerable to CBC bitflip attacks); it's harder to screw up using Fernet.