Ok, switching to CBC and then adding an additional property to store the IV for 
that resource. 

From: Antonio Sanso <asa...@adobe.com.INVALID>
Sent: Monday, November 13, 2017 1:34 AM
To: dev@sling.apache.org
Subject: Re: value level encryption
  

EXTERNAL

hi Jason,

leaving aside the API design for a second and focusing on the mere crypto.
I would really be careful on what you are defining as default. AES ECB is 
almost = to no encryption. Same as providing a fixed IV…

just saying…..
regards

antonio

    

Reply via email to