Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[feature request] - Using AES-GCM instead of CBC #55

Open
Sparkenstein opened this issue Jun 15, 2024 · 0 comments
Open

[feature request] - Using AES-GCM instead of CBC #55

Sparkenstein opened this issue Jun 15, 2024 · 0 comments

Comments

@Sparkenstein
Copy link

I was developing some small utility, I got this warning in the browser:

image

AES-CBC and AES-CTR do not provide authentication by default, 
and implementing it manually can result in minor, but serious mistakes. 
We recommended using authenticated encryption like AES-GCM to protect 
against chosen-ciphertext attacks.

Which makes sense, KDBX is used for storing data alongside secrets, GCM helps in checking if data is tampered or not. Should look into it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant