2 ms·
You can generate and discard bytes after initialization to avoid the weak key issue as well.
by dsl 14y ago
You can generate and discard bytes after initialization to avoid the weak key issue as well.
- daeken 14y agoAs far as I'm aware, that's not done here. (Warning: I've read analysis on the process, but haven't looked at the code myself)
- dsl 14y agoI was just pointing out that someone who was aware of the key weakness issue would probably just implement the known fix, rather than carefully select and test different salts.