News for hackers. Stuff that matters.
Re:Twinkle Notes: Cross-platform encrypted notes app by CiPHPerCoder on Wednesday February 05, 2020 @04:40PM (#22251252)
> 3. They should be authenticated.

I covered that:

> Furthermore, not authenticating your ciphertext means padding oracle attacks can be launched against the app.

The list above was just the requirements for the initialization vector, not the list of problems with the code.

Re:Twinkle Notes: Cross-platform encrypted notes app by trulyrandom on Thursday February 06, 2020 @02:03PM (#22259119)
Right, but I was specifically talking about authenticating the IV.