6 ms·

Once this TODO is completed and real PKCS#5 is used, CBC padding oracle attack? https://github.com/mothran/bunny/blob/master/libbunny/AEScrypt.py#L53 https://g

• mothran 13y ago
  Yes, that is high on my list to fix.
  • wulczer 13y ago
    What I meant is that using PKCS#5 padding ("N bytes of a value of N") will make it even more susceptible to a CBC oracle attack. I'm not nearly qualified to talk about that stuff, but instead of requiring PyCrypto maybe you should require Keyczar (http://code.google.com/p/keyczar/ http://code.google.com/p/keyczar/) and not have to worry about padding, IVs etc