akwizgran 13ebd369e2 The KDF was using CTR mode unsafely.
The data to be encrypted should go in the IV, with a blank
plaintext, so that the ciphertext is equal to the keystream.

Putting the data in the plaintext would have led to different keys
derived from the same source consisting of the same keystream XORed
with different guessable plaintexts. That would have been bad.
2011-11-17 09:01:59 +00:00
2011-11-16 18:15:32 +00:00
2011-11-16 18:15:32 +00:00
2011-11-16 15:35:16 +00:00
2011-08-31 17:44:42 +01:00
2011-06-22 11:42:33 +01:00
Description
Secure messaging, anywhere.
180 MiB
Languages
Java 97.9%
Kotlin 1.9%