How many times do we have to go over this? Crypto is hard to do right.
ECB: http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation...
How many times do we have to go over this? Crypto is hard to do right.
ECB: http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation...
The larger point here is that most keys probably aren't using AES to start with, and there's probably some other vulnerability in the overall system.
I'm sure there are vulnerabilities all over the place, but it would make even more sense if it happened to an AES system, because people would let their guard down because super-duper industrial strength encryption will take care of everything.
I didn't mean using it was brain dead, i mean using it without knowing the implications might lead to (accidentally) using it in in a brain dead way. For example, I could see them implementing the protocol and testing it without crypto and then simply adding crypto on top of it without thinking about the crypto portion.