AES-GCM encryption about encrypt

[robindijkhof]

I think this issue should be reopened. Since the start of this year PointyCastle does support AES GCM.

[Arcttyx]

will this functionality be added in the future?
I would like to use the same package for AES-GCM and RSA and signing, so this one looks good :)

[leocavalcante]

Hi @na2axl
Since this lib is a wrapper around PointyCastle, I need this mode landed there first :/
https://github.com/PointyCastle/pointycastle/tree/master/lib/block/modes
I'vent sufficient knowledge to implement one hehe

[leocavalcante]

Thanks for the headsup.

[soatok]

Correction: Their code lives in a different repository than what was linked.

I've submitted a security report to PointyCastle about a timing-leak in their AES-GCM implementation: bcgit/pc-dart#140

[edthedev]

The Safer Illinois application uses this library and received criticism for lacking AES/GCM. I am watching this issue in case I can assist in some way when this feature is ready to release.

[soatok]

PointyCastle has also been archived by its developer. It's probably safe to say it's abandoned. I was mistaken, see next comment.

[soatok]

Also, their AES leaks keys via cache-timing. bcgit/pc-dart#141

Probably worth keeping in mind for rokwire/safer-illinois-app#687