Comment Comment by saclark11 I wonder if Moxie would now consider knockknock "cryptographically doomed"? From the README, whose commit [1] is dated 2011-09-15:> The request is encrypted using AES in CTR mode, with an HMAC-SHA1 using the authenticate-then-encrypt paradigm.A mere three months later, he would publish The Cryptographic Doom Principle [2] (dated 2011-12-13).[1]: https://github.com/moxie0/knockknock/commit/e24eb33f666fc092...[2]: https://moxie.org/2011/12/13/the-cryptographic-doom-principl... parent saclark11 2 years ago
> The request is encrypted using AES in CTR mode, with an HMAC-SHA1 using the authenticate-then-encrypt paradigm.
A mere three months later, he would publish The Cryptographic Doom Principle [2] (dated 2011-12-13).
[1]: https://github.com/moxie0/knockknock/commit/e24eb33f666fc092...
[2]: https://moxie.org/2011/12/13/the-cryptographic-doom-principl...