Timeline for Safety of AES ECB when used with openssl_seal function
Current License: CC BY-SA 3.0
12 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Sep 4, 2015 at 11:26 | history | tweeted | twitter.com/#!/StackCrypto/status/639761557279350784 | ||
Aug 23, 2015 at 20:40 | comment | added | Scott Arciszewski | Might I recommend github.com/jedisct1/libsodium-php#sealed-boxes instead? | |
Aug 22, 2015 at 22:38 | vote | accept | SimZal | ||
Aug 22, 2015 at 16:55 | comment | added | otus | @SimZal, ok, too bad. | |
Aug 22, 2015 at 16:53 | comment | added | SimZal | @otus I've tested AES OFB and CFB and they both fail. It is the same if I try Blowfish - ECB works, while CBC, OFB and CFB fail. | |
Aug 22, 2015 at 16:34 | comment | added | otus | @SimZal, did you try OFB or CFB? If the lack of IV is the reason, they may fail as well, of course. | |
Aug 22, 2015 at 16:01 | comment | added | SimZal | It's not documented, but all CBC ciphers fail, I suspect because there is no parameter for initialization vector and therefore they cannot work. | |
Aug 22, 2015 at 14:06 | comment | added | Maarten Bodewes♦ | Why is CBC not an option? I don't see that limitation in the API... | |
Aug 22, 2015 at 12:13 | history | edited | otus | CC BY-SA 3.0 |
added 2 characters in body; edited tags
|
Aug 22, 2015 at 11:05 | answer | added | otus | timeline score: 4 | |
Aug 22, 2015 at 10:19 | review | First posts | |||
Aug 22, 2015 at 13:32 | |||||
Aug 22, 2015 at 10:19 | history | asked | SimZal | CC BY-SA 3.0 |