Re: using authenticated encryption in webcrypto

On Mon, Jun 18, 2012 at 3:40 AM, David McGrew <mcgrew@cisco.com> wrote:
> Hi Ryan,
>
> On Jun 15, 2012, at 2:27 PM, Ryan Sleevi wrote:
>
>
> David,
>
> +1 to supporting AEAD.
>
> However, I'm not sure I'd agree with the statement that simplifies the API
> any, so I was hoping you could explain.
>
>
> good question.   What I meant is that by using the same AEAD API for
> CBC-HMAC, we can provide the implementer with access to most of the
> encryption algorithms of interest through a uniform interface.  But you are
> right that as long as raw CBC is present the API is not smaller.

I'm totally in favor of supporting AEAD, but I also want to be able to
interface with systems which don't expect AEAD, so I think it's
important to support the raw primitives as well.

-Ekr

Received on Monday, 18 June 2012 15:27:27 UTC