Timeline for Is my sending of encrypted information secure?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 28, 2016 at 20:07 | vote | accept | user2924127 | ||
| Jan 20, 2016 at 0:40 | history | edited | puzzlepalace | CC BY-SA 3.0 |
added 99 characters in body
|
| Jan 20, 2016 at 0:32 | comment | added | puzzlepalace |
I missed that detail in the source, I assumed from the password variable that some sort of key derivation was done to obtain the AES key. You are right that the server seems to have just one master AES key.
|
|
| Jan 19, 2016 at 23:44 | comment | added | Neil Smithline | Puzzle - you mention that the OP is already storing the encryption keys. I'm not sure what you are referring to. From the code in the OP, it looks like there is one encryption key used for all client-side encrypted data that is hardwired into the code. Are you referring to another key? | |
| Jan 19, 2016 at 8:23 | history | answered | puzzlepalace | CC BY-SA 3.0 |