search

bitwiseshiftleft / sjcl

Stanford Javascript Crypto Library
http://bitwiseshiftleft.github.com/sjcl/
Other
7.19k stars 988 forks source link

uses of randomWords in convenience.js use 0 paranoia #333

Closed animalillo closed 7 years ago

animalillo commented 7 years ago

The uses of randomWords in the convenience functions use a hard-coded paranoia level of 0 instead of the one set by default globally, is this intentional? Am i missing something? Example of such use: here As here is said, a paranoia of 0 is not secure: here

Nilos commented 7 years ago

This is totally fine as this is only for IV generation. An IV has to only be unique. It is not required that it is actually cryptographically random.

animalillo commented 7 years ago

is it also ok for salts?