Gurpartap/aescrypt

Releases2

Frequency12 hours

Last Release almost 14 years ago

Stars156

A simple and opinionated AES encrypt / decrypt Ruby gem that just works.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2013-7463 ↗	Apr 19, 2017Wednesday, 19 April 2017, 17:59	—	5 MEDIUM
The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.