Hacker News Reader

I actually using this scheme for several years now, but AES itself is not authenticated and I added truncated SHA256 to the ID to make it more robust.

View on HN

What exactly would you be authenticating? The scheme discussed here is just using AES to generate the equivalent of a UUID.

Reply on news.ycombinator.com