search

HarbingerOfFire / bivittatusDB

Operator Based Relational Database Management system for python
https://pypi.org/project/bivittatusDB/
MIT License
7 stars 1 forks source link

Fix encrypt.py #3

Closed ScriptSlayer0 closed 2 months ago

ScriptSlayer0 commented 2 months ago

Hi @HarbingerOfFire, I've read your code and I've seen a potential security problem. In encrypt.py you use AES, as in Blowfish you use ECB_mode, and I have to tell you that ECB is not secure, it is much better to use CBC_mode, although you can also use GCM_mode. If you want to check the differences between CBC and GCM I leave you the following link: https://crypto.stackexchange.com/questions/2310/what-is-the-difference-between-cbc-and-gcm-mode

HarbingerOfFire commented 2 months ago

Thank you for you find! I will definitely keep this in mind for future codes as well!