Modify master key block mode to CBC over CTR

ddspringle / framework-one-secure-auth

An example fw/1 application with secure single and two-factor (2FA) authentication and session management functions

Apache License 2.0

31 stars 5 forks source link

Modify master key block mode to CBC over CTR #19

Closed ddspringle closed 3 weeks ago

ddspringle commented 3 weeks ago

Modifies the master key block mode from CTR to CBC for greater compatibility with newer JDK (JDK17+) changes that enforce IVs on CTR block mode. Instead of adding a static IV I opted to just change the mode. NOTE: This only affects the encryption and decryption of the keyring. See the README for more details on this change.

Resolves #16