Hacker News new | ask | show | jobs
by brohee 3900 days ago
Is it really using CFB mode without any kind of authentication? If so, mostly useless...
1 comments
dchest 3900 days ago
It actually uses HMAC-SHA256 to authenticate ciphertext, although with the same key as AES encryption.
link
brohee 3899 days ago
It's worth mentioning it on the homepage, it looks very scary without it.
link