aeris22’s avataraeris22’s Twitter Archive—№ 33,032

          1. …in reply to @super3
            @super3 It’s not me who mention you. But here is your bad crypto : github.com/Storj/core/blob/master/lib/utils.js#L97-L109
            Permalink On twitter.com Twitter logo aeris22’s avatar Mood -3 🙁
        1. …in reply to @aeris22
          @super3 key and iv must be unique *per encryption*. Seems not the case here (unique per node/private key).
          Permalink On twitter.com Twitter logo aeris22’s avatar Mood 0
      1. …in reply to @aeris22
        @super3 If using hmac, you need autonomous key init, here key and iv hmac reuse parameter from pbkdf2.
        Permalink On twitter.com Twitter logo aeris22’s avatar Mood 0
    1. …in reply to @aeris22
      @super3 koy and iv must be really random, so salt must be random.
      Permalink On twitter.com Twitter logo aeris22’s avatar Mood 0
  1. …in reply to @aeris22
    @super3 And you already have pbkdf2, no need for hmac after that.
    On twitter.com Twitter logo aeris22’s avatar Mood -1 🙁