Omit IV for AES128-CBC when requiring to always get the same ciphertext encrypting random IDs
Imagine having images stored in a system with their 256 bit hash (BLAKE2b) as their unique ID. We want to produce a URL for each image, something like:
https://host/images/cleartext-image-ID
In order for one user not to be able to steal t… Continue reading Omit IV for AES128-CBC when requiring to always get the same ciphertext encrypting random IDs