[{"data":1,"prerenderedAt":163},["ShallowReactive",2],{"project-21231563":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":33,"aspects":34,"strip":37,"post_text":29,"what":39,"said":59,"maker_in_thread":91,"shape":98,"grid":100,"attempts":118,"same_week":127,"maker_shows":155,"maker_hidden":156,"reader_version":157,"card":158},"21231563","Aes.vbs","AES-256-CBC Encrypt and Decrypt in VBScript for legacy apps","title","Show HN: Aes.vbs – AES-256-CBC Encrypt and Decrypt in VBScript for legacy apps","https:\u002F\u002Fgithub.com\u002Fsusam\u002Faes.vbs","github.com","susam",1570870006,2019,13,7,1539,2195,71,"shown","security_privacy","encryption library","library",[24,25,26,27],"aes-256-cbc","vbscript","encryption","legacy apps","quiet",null,{"positive":31,"neutral":31,"mixed":32,"critical":31},1,0,3,{"idea":35,"execution":36},{"positive":31,"critical":32},{"positive":32,"critical":31},[38,31,32,32,33,32,32],5,{"problem":40,"audience":29,"pricing":29,"motivation":29,"time_to_build":29,"stack":46,"openness":58,"stage":58,"team_size":58},{"value":41,"source":42,"evidence":43},"Encrypting and decrypting data in legacy VBScript applications","inferred",[44],{"id":45},"post",[47,52],{"value":48,"source":49,"evidence":50},"VBScript","maker",[51],{"id":45},{"value":53,"source":49,"evidence":54},"Windows .NET cryptography classes (HMACSHA256)",[55],{"id":56,"by":11,"text":57},"21232389","That's a good point. Indeed, that's the right way to use AES-256-CBC. There is an HMACSHA256 class available[1] which is quite straightforward to use, so I did not think about…","unknown",{"praise":60,"objections":69,"requests":77,"questions":82,"alternatives":90},[61],{"value":62,"source":63,"evidence":64},"Interesting to see a VBScript project on HN","commenter",[65],{"id":66,"by":67,"text":68},"21231824","amanzi","Nice work. I don't know much about the cryptography to comment on whether this is a good implementation or not, but it's cool to see a VBScript link on Hacker News! :-)",[70],{"value":71,"source":63,"evidence":72},"AES-CBC used without an authentication tag; should use Encrypt-then-MAC",[73],{"id":74,"by":75,"text":76},"21232157","rickette","If you're gonna use AES-CBC then please use Encrypt-then-MAC. Now you're performing encryption without an authentication tag (HMAC), also known as…",[78],{"value":79,"source":63,"evidence":80},"Add HMAC authentication to encryption",[81],{"id":74,"by":75,"text":76},[83],{"value":84,"source":63,"evidence":85},"Why is this on HN?",[86],{"id":87,"by":88,"text":89},"21232065","jsilence","Nice, but why is this on HN?",[],{"comments":92,"answered":32,"key":93},2,[94,95],{"id":56,"text":57},{"id":96,"text":97},"21256302","Update: I have now updated[1] the Encrypt() and Decrypt() functions in VBScript to compute and verify an authentication tag during encryption and decryption, respectively. The…",{"commenters":38,"max_depth":33,"maker_replies":92,"first_comment_mins":99,"lifespan_hours":18},66,[101,103,105,107,109,111,115],[66,32,38,102,67,32],"project\u002Fpositive\u002Fidea",[74,31,31,104,75,32],"project\u002Fcritical\u002Fexecution",[56,31,32,106,11,31],"maker\u002Fneutral\u002Fexecution",[96,31,32,108,11,31],"project\u002Fpositive\u002Fexecution",[87,92,33,110,88,32],"project\u002Fneutral\u002Fidea",[112,92,32,113,114,32],"21232073","commenter\u002Fneutral\u002Fnone","thejosh",[116,92,32,117,88,32],"21235107","other\u002Fneutral\u002Fnone",[119,120,124],{"id":4,"t":12,"points":14,"comments":15},{"id":121,"t":122,"points":123,"comments":31},"21374050",1572233816,10,{"id":125,"t":126,"points":92,"comments":32},"24382483",1599298844,[128,133,138,142,146,150],{"id":129,"name":130,"points":131,"category":132},"21231208","Bel",1288,"languages",{"id":134,"name":135,"points":136,"category":137},"21215484","Spider Pro",391,"dev_tools",{"id":139,"name":140,"points":141,"category":137},"21270424","Pipedream",245,{"id":143,"name":144,"points":145,"category":132},"21234891","dial",190,{"id":147,"name":148,"points":149,"category":137},"21268324","reloading",187,{"id":151,"name":152,"points":153,"category":154},"21253850","Alt-tab-macos",156,"productivity",19,false,"v2",{"id":159,"name":5,"line":6,"ai":156,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":160,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":161,"url":9,"mix":162,"praise":62,"objection":71,"sub":21},21231563,[24,25,26,27],"5100300",[31,31,32,31],1794036581851]