|
|
|
|
|
|
by tptacek
4574 days ago
|
|
|
RSA in what mode? AES in what mode? IGE? Why are you using an authenticated cipher mode from the 1970s that predates every modern AEAD construction? DH with what group? How do you authenticate the exchange? How does forward secrecy work? Saying "we didn't roll our own: we use RSA, AES, and DH" is extremely worrying; it suggests that you're not aware of where the complexity in a cryptosystem lives. Anybody on HN can write the trivial code to ask the JCE for an RSA or an AES. You have to do better. |
|
|