Carelessness

• Carelessness versus craftsmanship in cryptography Two popular AES libraries, aes-js and pyaes, ‘helpfully’ provide a default IV in their AES-CTR API, leading to a large number of