5 ms·
What are the advantages of GCM over CBC? And whats wrong with AES256?
by norcimo5 9y ago
What are the advantages of GCM over CBC? And whats wrong with AES256?
- kaoD 9y agoGCM has an integrity check built in, which is very useful in crypto. https://crypto.stackexchange.com/questions/2310/what-is-the-difference-between-cbc-and-gcm-mode https://crypto.stackexchange.com/questions/2310/what-is-the-... https://crypto.stackexchange.com/questions/14747/gcm-vs-ctrhmac-tradeoffs https://crypto.stackexchange.com/questions/14747/gcm-vs-ctrh... https://security.stackexchange.com/questions/33569/why-do-you-need-message-authentication-in-addition-to-encryption https://security.stackexchange.com/questions/33569/why-do-yo...
- snakeanus 9y ago- GCM unlike CBC is an AEAD mode (has a MAC build-in) - CBC needs padding, which when misused can lead to padding oracle attacks - GCM allows for parallel encryption > And whats wrong with AES256? There are more modern, faster and better ciphers that are designed to not be vulnerable against many side-channel attacks that AES is difficult to protect against.