CipherInputStream for AEAD modes is insecure (GCM, etc.): ciphertext tampering without detection possible

[Matthew Hall]

On Mon, Mar 03, 2014 at 05:17:04PM -0800, Valerie (Yu-Ching) Peng wrote:
> *Moreover, this class catches all exceptions that are not thrown by
> its ancestor classes.*

Then it should be able to throw an AEAD exception wrapped in an IOException, 
should it not?

Matthew.