Hacker News new | ask | show | jobs
by snakeanus 3282 days ago
- GCM unlike CBC is an AEAD mode (has a MAC build-in)

- CBC needs padding, which when misused can lead to padding oracle attacks

- GCM allows for parallel encryption

> And whats wrong with AES256?

There are more modern, faster and better ciphers that are designed to not be vulnerable against many side-channel attacks that AES is difficult to protect against.