3 ms·
I really can't recommend skipping a KDF for encryption on the basis that AES-CBC is "already secure." Use of a strong KDF has a direct bearing on the compute t
by sk5t 13y ago
I really can't recommend skipping a KDF for encryption on the basis that AES-CBC is "already secure." Use of a strong KDF has a direct bearing on the compute time required for an attacker to brute force the key.
- singlow 13y agoI think he means that your AES-CBC should already be doing key derivation from the user supplied password.