Timeline for Strength of below aes encryption
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 7, 2017 at 12:52 | comment | added | Liam Dennehy | Even a "strong" alpha-numeric password with symbols is rather weak compared to a byte array taken from a good random source, and you should at least be salting it before using it as an actual encryption key. You also need to make sure the phrase is the same length as the cipher's key. crypto.pbkdf does all this for you as well as adding rounds to deter brute-force attacks. These exist for a reason, and are not hard to implement, but improve security over text-based strings by many orders of magnitude. Again, get in the habit of using proper security even when experimenting or prototyping. | |
| Aug 7, 2017 at 11:30 | comment | added | user27111987 | some_password was only a sample password. Obviously in production there would be a strong password. | |
| Aug 7, 2017 at 9:37 | history | answered | Liam Dennehy | CC BY-SA 3.0 |