purple-pulsesms icon indicating copy to clipboard operation
purple-pulsesms copied to clipboard

Use something other than homerolled crypto

Open GIJack opened this issue 2 years ago • 1 comments

Hi,

This project uses its own implementation of AES. As you may or may not know, this is a legit bad idea.

Recommended to use openssl, libressl, or other well maintained crypto library that has AES.

GIJack avatar Jun 13 '22 05:06 GIJack

It's not well documented but it's using the AES lib from https://github.com/kokke/tiny-AES-C/ in order to reduce dependencies and memory usage

Using OpenSSL wasn't an option when the plugin was first written due to GPL compliance, but worth looking at again now that openssl3 is GPL OK

EionRobb avatar Jun 13 '22 09:06 EionRobb