Ok, switching to CBC and then adding an additional property to store the IV for that resource.
From: Antonio Sanso <asa...@adobe.com.INVALID> Sent: Monday, November 13, 2017 1:34 AM To: dev@sling.apache.org Subject: Re: value level encryption EXTERNAL hi Jason, leaving aside the API design for a second and focusing on the mere crypto. I would really be careful on what you are defining as default. AES ECB is almost = to no encryption. Same as providing a fixed IV… just saying….. regards antonio