Re:New TLS Padding Oracles
by blattimwind on Tuesday February 26, 2019 @02:23PM
(#19257470)
> Oh definitely, GCM (or another AEAD cipher) is a much better choice
GCM is only a better choice if you have hardware support for it. I'd recommend Chacha20-Poly1305 for anything that might have to cope without hardware support.
GCM is only a better choice if you have hardware support for it. I'd recommend Chacha20-Poly1305 for anything that might have to cope without hardware support.