Abusing insecure defaults: Forging GCM ciphertexts for the Node.js crypto module

Insecure defaults often lead to vulnerable implementations. This blog post explores such an insecure default in the Node.js crypto module, which breaks authenticity and affects many implementations in practice. Read more

Similar