6 ms·
What is it then really? This sounds like a wrapper function…
by hashstring 3y ago
What is it then really? This sounds like a wrapper function…
- woodruffw 3y agoIt’s a high-level interface for authenticated encryption. Calling it an algorithm is like calling HTTP an algorithm; it’s true in the most useless sense.
- nneonneo 3y agoYep, it's a wrapper around some cryptographic primitives that is fairly misuse-resistant. It's not hard to screw up using the individual primitives in such a way that you lose the desirable cryptographic properties (for example, not authenticating the IV, making the plaintext vulnerable to CBC bitflip attacks); it's harder to screw up using Fernet.