News for hackers. Stuff that matters.

A comment on Typing the Letters A-E-S Into Your Code (2009). Parent comment

Re:Typing the Letters A-E-S Into Your Code (2009) by F30 on Saturday January 10, 2015 @04:59AM (#8866424)
It is out of question that you can do it wrong without typing A-E-S: Crypto is hard, and you can always fuck up in an infinite amount of ways.

That being said, do you have any reference on MCRYPT_RIJNDAEL_256 being an actual problem? The linked OpenCart issues deal with ECB mode and missing authentication, rather than the block size.

[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by sarciszewski on Saturday January 10, 2015 @03:21PM (#8867783)
It's not really a problem so much as it's not doing what they think it's doing. 256-bit block-size Rijndael might even be better than 128-bit (AES). I don't know.
[ Parent | on HN ]