New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[SECURITY] Replace CryptoJS with the WebCrypto API #6

Open

lagmoellertim opened this issue Feb 28, 2019 · 0 comments

Labels

security enhancement

Owner

lagmoellertim commented Feb 28, 2019 •

edited

Loading

Describe the security flaw
CryptoJS is outdated and not using the newest tech available.

How does this security flaw affect the software
Better security and faster encryption/decryption

Describe possible solutions
Replace CryptoJS with the WebCrypto API and use AES-GCM together with PBKDF2

lagmoellertim added the security enhancement label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment