Comment Comment by rosnd Why do you think it is likely? That's a very strong claim.> such as bad RNGHow could that be a problem? The attacker doesn't control your passwords. How would you exploit a known IV as an attacker in this context? parent rosnd 3 years ago
> such as bad RNG
How could that be a problem? The attacker doesn't control your passwords. How would you exploit a known IV as an attacker in this context?