|
|
|
|
|
by pfg
4792 days ago
|
|
I basically agree. However, if you trust KeePasses implementation of AES-CBC and you consider the fact that the IV will be randomly generated for every file version, you're betting on AES-CBC not leaking any information about the plain-text (which hopefully some expert already checked). I don't know whether the AES implementation in KeePass has been checked by someone considered an expert yet. |
|