2 ms·
Apparently implementing CBC correctly is too complex to do right: https://www.imperialviolet.org/2013/10/07/chacha20.html https://www.imperialviolet.org/2013/1
by higherpurpose 12y ago
Apparently implementing CBC correctly is too complex to do right:
https://www.imperialviolet.org/2013/10/07/chacha20.html https://www.imperialviolet.org/2013/10/07/chacha20.html
- tptacek 12y agoNo, that's not what he's saying. He's saying that making the TLS CBC constructions secure is hard. They were designed in the 1990s. Making a CBC implementation secure today is much easier.
- Tobu 12y agoIndeed, just about every brand of SSL load balancer was doing it wrong: https://www.imperialviolet.org/2014/12/08/poodleagain.html https://www.imperialviolet.org/2014/12/08/poodleagain.html