undefined | Better HN

0 pointsCiPHPerCoder7y ago0 comments

Oh, this did seem familiar!

The AES-CBC thing is tied to the key, right? So the downgrade attack isn't possible.

0 comments

1 comments · 1 top-level

Yes, new account keys are identified (presence of a mac key) and block the downgrade (see code link above).

j / k navigate · click thread line to collapse