DES used in CBC mode without IV #4

Open

opened

on Apr 12, 2018

In GidsPINManager.java, DES function is used for the external and mutual challenge in CBC mode and without and initialization vector. This is a vulnerability against padding oracle attack.

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests