Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Ask questions, find answers and collaborate at work with Stack Overflow for Teams.
Ask questions, find answers and collaborate at work with Stack Overflow for Teams. Explore Teams
Teams
Q&A for work
Connect and share knowledge within a single location that is structured and easy to search.
That technique from the code is known as "ciphertext stealing""ciphertext stealing". We usually use it with CBC, but your client seem to be using ECB.
So yes, it has the flaw of using the insecure ECB mode.
That technique from the code is known as "ciphertext stealing". We usually use it with CBC, but your client seem to be using ECB.