search

wokier / gwt-crypto

Automatically exported from code.google.com/p/gwt-crypto
8 stars 1 forks source link

Port over SICBlockCipher, switch AES to CTR by default #27

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
AESCipher initializes with:

        this.cipher = new PaddedBufferedBlockCipher(new CBCBlockCipher(cipher));

CBC is subject to Padding Oracle attacks 
(https://blog.skullsecurity.org/2013/padding-oracle-attacks-in-depth). 

It would probably be worthwhile porting over SICBlockCipher (bouncy castle's 
CTR mode) and switching the default to CTR.

Original issue reported on code.google.com by quickte...@gmail.com on 14 Feb 2014 at 12:14