IssueRaiser

Don't use this for anything important, and certainly not with a non-unique password.

Don't use this for anything important, and certainly not with a non-unique password. Key is derived from a single SHA256 (can be brute-forced very rapidly), cyphertext isn't authenticated (can be tampered with or corrupted without anything noticing), and the padding function is broken (strips trailing NULLs, so no good for binary files).

Posted by Freaky on Jun 5, 2015, 3:50 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.6,000 issues0 comments

reliability (Other)

Don't use this for anything important, and certainly not with a non-unique password.

FreakyJun 5, 2015, 3:50 AM

Don't use this for anything important, and certainly not with a non-unique password. Key is derived from a single SHA256 (can be brute-forced very rapidly), cyphertext isn't authenticated (can be tampered with or corrupted without anything noticing), and the padding function is broken (strips trailing NULLs, so no good for binary files).

Comments (0)

No comments yet. Start the discussion.

Comment on this issue