IV should not equal key

[cryptochecktool]

In your code: https://github.com/mirror/jdownloader/blob/f274b29897aad2e0ff0d4fd148e42aadf8b622fa/src/org/jdownloader/container/D.java #L322 Use IV=key. But iv should be set to a sufficiently random number, otherwise it will lead to a CPA attack. If IV=key, then CCA attacks will be allowed, that is, only need to send a specific message for encryption, then the key can be restored. For specific attack methods, see: [https://cedricvanrompay.gitlab.io/cryptopals/challenges/[27](https://cedricvanrompay.gitlab.io/cryptopals/challenges/27](https://cedricvanrompay.gitlab.io/cryptopals/challenges/%5B27%5D(https://cedricvanrompay.gitlab.io/cryptopals/challenges/27). html).html