[GH-ISSUE #322] Urgent: IV must be random #284

Closed
opened 2026-03-03 11:42:11 +03:00 by kerem · 2 comments
Owner

Originally created by @thankfulmachine on GitHub (Sep 21, 2025).
Original GitHub issue: https://github.com/Finb/Bark/issues/322

You must not require that the initialization vector is established ahead of time and reused. It must be randomly generated with each push by the originator and sent alongside the ciphertext. Please do not ask the user to enter and save an IV in the app.

Originally created by @thankfulmachine on GitHub (Sep 21, 2025). Original GitHub issue: https://github.com/Finb/Bark/issues/322 You _must not_ require that the initialization vector is established ahead of time and reused. It must be randomly generated with each push by the originator and sent alongside the ciphertext. Please do not ask the user to enter and save an IV in the app.
kerem closed this issue 2026-03-03 11:42:11 +03:00
Author
Owner

@Finb commented on GitHub (Sep 21, 2025):

Hi!

the IV can be random. The IV you enter in the app is only used for the example script; the example shows how to include the IV in the parameters for the app to perform decryption.

<!-- gh-comment-id:3315934453 --> @Finb commented on GitHub (Sep 21, 2025): Hi! the IV can be random. The IV you enter in the app is only used for the example script; the example shows how to include the IV in the parameters for the app to perform decryption.
Author
Owner

@thankfulmachine commented on GitHub (Sep 21, 2025):

Ah ok thank you. It's a little confusing because I got there by tapping "Encryption settings", so I thought I was editing the settings.

Additionally it would also be nice if the encryption settings could be more accessible.

Thanks for working on this.

<!-- gh-comment-id:3315944740 --> @thankfulmachine commented on GitHub (Sep 21, 2025): Ah ok thank you. It's a little confusing because I got there by tapping "Encryption settings", so I thought I was editing the settings. Additionally it would also be nice if the encryption settings could be more accessible. Thanks for working on this.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Bark#284
No description provided.