Dan Draper

icon indicating a website link cipherstash.com icon indicating an email [email protected]

icon company @cipherstash icon location Sydney, Australia icon location CipherStash founder, cryptography nerd, Rust zealot.

Results 3 comments of Dan Draper

Issue with finding values with encrypted data

I've just started using this lib and came across this issue. Please do not use a fixed IV with AES. While there are some very specific cases that it will...

Issue with finding values with encrypted data

> @coderdan thanks for the insight. Are you recommending we use randomly generated IVs? IVs must _never_ repeat. If the same message is encrypted more than once with the same...

Issue with finding values with encrypted data

With CBC it is _less_ bad, yes. Still a fixed IV will result in deterministic encryption and potential chosen plaintext attacks. Allowing the IV to be an async function would...