To be fast about the context, we have a lab, and I struggle for several days on one task. Here is the topic of the lab. Where i'm struggling is in the task 5. I've chosen to implement the Option B (3.5.2). I use the development library of openssl. My algorithm consists in looping over the dict...

There are a few JavaScript AES implementations available such as Gibberish-aes So assuming the AES algorithm has been implemented correctly in this library then it should be as secure as any other language implementation ? And if not why not ?

if I go to http://facebook.com, I am not redirected to https://www.facebook.com. If it doesn't have https can the login be secure? usually I am redirected to a https page on other sites? How is facebook managing it's login?

What are cryptographic reasons to choose an authenticated-encryption mode of operation (such as GCM) over a traditional encryption mode plus an independent MAC, or vice versa? Assume there is no implementation reason to pick one or the other (crypto library supports both, no backward compatibili...