Skip to main content

MAC_DOMAIN_SEPARATOR

Constant MAC_DOMAIN_SEPARATOR 

Source
const MAC_DOMAIN_SEPARATOR: &[u8] = b"bitwarden.aes256-cbc-hmac-sha256-aead.v1";
Expand description

Domain separation label prefixed to the MAC input. It distinguishes this construction from the legacy Aes256CbcHmacSha256 Encrypt-then-MAC construction, which MACs iv || ciphertext under the same MAC sub-key, so that a tag produced by one construction can never be a valid tag for the other.