Skip to content
This repository has been archived by the owner on Feb 27, 2023. It is now read-only.

dir encryption does not check key sizes #204

Closed
alokmenghrajani opened this issue Nov 9, 2018 · 0 comments
Closed

dir encryption does not check key sizes #204

alokmenghrajani opened this issue Nov 9, 2018 · 0 comments

Comments

@alokmenghrajani
Copy link
Contributor

If your key size is too short (e.g. 16 bytes), you can accidentally encrypt something with AES-128 but the JWE tag will be A256GCM. We should instead raise an error.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@alokmenghrajani @csstaub