Skip to content
Hackerly

Comment on How Not to Encrypt a File – Courtesy of Microsoftparent

Comments

norcimo5

What are the advantages of GCM over CBC? And whats wrong with AES256?

snakeanus

- GCM unlike CBC is an AEAD mode (has a MAC build-in)

- CBC needs padding, which when misused can lead to padding oracle attacks

- GCM allows for parallel encryption

And whats wrong with AES256?

There are more modern, faster and better ciphers that are designed to not be vulnerable against many side-channel attacks that AES is difficult to protect against.

kaoD
AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.