From ced07b2dd81d55689f71edc3ecc766c89c15a4e4 Mon Sep 17 00:00:00 2001 From: 1e99 Date: Fri, 8 Nov 2024 16:11:49 +0100 Subject: [PATCH] add iv definition --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index e228b03..9ab8dd8 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ You want to write it on paper, but everyone can read that. PassED solves these issues by allowing you to generate single-use URLs that contain your password. ## How it works -When you create a password URL, PassED firstly encrypts the password in your browser using `AES-GCM`. It then uploads the encrypted password to the server, which responds with an ID that uniquely identifies that password. The AES Key and IV is then stored in the URL, along with the ID. +When you create a password URL, PassED firstly encrypts the password in your browser using `AES-GCM`. It then uploads the encrypted password to the server, which responds with an ID that uniquely identifies that password. The AES Key and IV (Initialization vector) is then stored in the URL, along with the ID. When someone views the password, PassED looks at the URL. It knows the password ID, AES Key and IV. It reaches out to the server, asks for a password with the ID from the URL, and then decrypts it with the AES Key and IV.