News for hackers. Stuff that matters.

A comment on AES on the iPhone is Broken by Default.

Re:AES on the iPhone is Broken by Default by program on Wednesday December 14, 2011 @11:52AM (#3352513) 

  "a serious documentation flaw"
The all-zeroes IV is documented in the official CCCrypt(3cc) man page at:

http://developer.apple.com/library/ios/#documentation/System...

this does not exonerate Apple having made a wrong choice of design.

[ Parent | on HN ]
Re:AES on the iPhone is Broken by Default by marshray on Wednesday December 14, 2011 @12:50PM (#3352774)
Yes, it does. (IMHO)

A low-level API is not the thing to design your cryptographic protocol around.

A low-level crypto API is not prescriptive, it's documentation is merely descriptive. Apple devs were merely documenting and unit testing what happens when you pass in a certain combination of parameters.

[ Parent | on HN ]