diia-open-source / be-auth-service

European Union Public License 1.2
71 stars 6 forks source link

Don't use AES ECB mode with null as iv #3

Open elcreator opened 8 months ago

elcreator commented 8 months ago

https://github.com/diia-open-source/be-auth-service/blob/main/src/services/authSchema.ts#L116 Consider using random IV with better mode.

ghost commented 7 months ago

Hi @elcreator Thank you for your attention. We would be glad to see a pull request with a proposal for implementing this issue.