[feature request] - Using AES-GCM instead of CBC
Opened this issue · 1 comments
Sparkenstein commented
I was developing some small utility, I got this warning in the browser:
AES-CBC and AES-CTR do not provide authentication by default,
and implementing it manually can result in minor, but serious mistakes.
We recommended using authenticated encryption like AES-GCM to protect
against chosen-ciphertext attacks.
Which makes sense, KDBX is used for storing data alongside secrets, GCM helps in checking if data is tampered or not. Should look into it
Sparkenstein commented
I am assuming the project is dead