Unfortunately I have to implement some naive homemade symmetric crypto, since ordinary AES CTR is not implemented in available API on target platform.
What I’m going to do is, given encryption password and plaintext bytes, generate “encryption key” from password via PBKDF2/RFC 2898 with length of plaintext, and then xorXOR this “gamma” against plaintext bytes.
Could you please criticize this approach and enumerate vulnerabilities and issues?
Thanks!