3 ms·
> "AES-256 in CBC mode" is not a confidence-inspiring description of a cryptosystem I'll second this, although knowing the author, my concurrence doesn't add m
by some_furry 12y ago
> "AES-256 in CBC mode" is not a confidence-inspiring description of a cryptosystem
I'll second this, although knowing the author, my concurrence doesn't add much weight.
To wit:
* Encryption is not authentication. CBC mode in particular is vulnerable to
bit-flipping attacks.
* The password KDF is an important implementation detail that needs to be
considered.
* Browser extensions and node-webkit > browser JS
OP: Let me know if you'd like to know more about these details and/or advice on moving forward.
- dylanbfox 12y agoHey thanks for the feedback! I go into more detail on the "info" page. Wasn't sure if I should include the entire description on the home page or not. I'd love all the feedback I can get. That's exactly why I wanted to post it to HN today. I'll follow you on Twitter and DM you my email.