AES-CBC padding from David Wagner on 2012-09-20 (public-webcrypto-comments@w3.org from September 2012)

From: David Wagner <daw@cs.berkeley.edu>
Date: Thu, 20 Sep 2012 15:22:01 -0700 (PDT)
To: public-webcrypto-comments@w3.org
Message-Id: <201209202222.q8KMM1NB008425@taverner.cs.berkeley.edu>

When the user selects AES-CBC encryption, the specification should
probably specify what kind of padding scheme will be used to pad out
the data to a multiple of the block length.

I don't think this necessarily needs to be user-selectable.  However,
I do think the specification should say what kind of padding scheme will
be used, so that it is possible to build other implementations that can
interoperate with this JavaScript API (without needing to reverse-engineer
the WebCryptoAPI implementation).  Does this sound right to others?

Received on Friday, 21 September 2012 16:09:00 UTC