data-profile Encoder
AES-256-ECB encrypt/decrypt ด้วย JWT sub UUID
Guest
G
Generate data-profile
Decrypt data-profile
How data-profile Works
Algorithm: AES-256-ECB + PKCS7 padding
Key derivation: JWT.sub.replaceAll("-", "") → 32 ASCII chars → 256-bit key
Vulnerability: ECB mode = deterministic, key from public JWT claim, no server validation