France-ioi / login-module

Login app to be used in all projects linked to FranceIOI
MIT License
1 stars 3 forks source link

Platform API: don't use AES-128-ECB anymore #19

Open smadbe opened 4 years ago

smadbe commented 4 years ago

AES-128-ECB is considered very unsafe and as "never to be used" for encryption for years. The easiest fix is probably just to use AES-128-CBC instead. Of course, client (using the platform api) must be updated as well.