> Given the many vulnerabilities related to the use of AES-CBC with HMAC What ar...

ufo on May 7, 2015 | parent | context | favorite | on: Go crypto: bridging the performance gap

> Given the many vulnerabilities related to the use of AES-CBC with HMAC

What are they talking about here? Are there any important ones if you MAC after encryption? The only vulnerabilities I know of are when you MAC before you encrypt.

tptacek on May 7, 2015 [–]

They're talking about the TLS CBC constructions, not AES-CBC and HMAC in the abstract.