3 ms·
> Given the many vulnerabilities related to the use of AES-CBC with HMAC What are they talking about here? Are there any important ones if you MAC after encryp
by ufo 12y ago
> Given the many vulnerabilities related to the use of AES-CBC with HMAC
What are they talking about here? Are there any important ones if you MAC after encryption? The only vulnerabilities I know of are when you MAC before you encrypt.
- tptacek 12y agoThey're talking about the TLS CBC constructions, not AES-CBC and HMAC in the abstract.