Ask Java for AES and You Get ECB. Nobody Warns You.
- Created
- 29 Apr 2023
- Last reply
- over 3 years ago
- Replies
- 0
- Views
- 0
- Reactions
- 0
Discussion of the blog article Ask Java for AES and You Get ECB. Nobody Warns You..
Cipher.getInstance("AES") compiles, runs, encrypts, decrypts, and hands you the weakest mode in the box. Here is the OpenJDK source that makes that decision, and the line where ECB gets chosen for you.
Discussion thread — share findings, corrections and follow-ups below.