Re:Bunny.py: A WiFi darknet that hides its traffic in the no...
by mothran on Thursday May 16, 2013 @03:59PM
(#5720796)
Yes, that is high on my list to fix.
[ Parent
| on HN ]
Re:Bunny.py: A WiFi darknet that hides its traffic in the no...
by wulczer on Thursday May 16, 2013 @04:06PM
(#5720830)
What I meant is that using PKCS#5 padding ("N bytes of a value of N") will make it even more susceptible to a CBC oracle attack.
I'm not nearly qualified to talk about that stuff, but instead of requiring PyCrypto maybe you should require Keyczar (http://code.google.com/p/keyczar/) and not have to worry about padding, IVs etc