From e9774ad8234b0b5bd816115a1cf7ba34a4e7e31d Mon Sep 17 00:00:00 2001
From: Mo Bitar <me@bitar.io>
Date: Wed, 18 Jan 2017 21:26:35 -0600
Subject: [PATCH] comment about encryption IV

---
 app/assets/javascripts/app/services/helpers/crypto.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/assets/javascripts/app/services/helpers/crypto.js b/app/assets/javascripts/app/services/helpers/crypto.js
index 8a021da3e..e93b9017c 100644
--- a/app/assets/javascripts/app/services/helpers/crypto.js
+++ b/app/assets/javascripts/app/services/helpers/crypto.js
@@ -39,6 +39,7 @@ class SNCrypto {
 
   encryptText(text, key) {
     var keyData = CryptoJS.enc.Hex.parse(key);
+    // items are encrypted with random keys; no two items are encrypted with same key, thus IV is not needed
     var ivData  = CryptoJS.enc.Hex.parse("");
     var encrypted = CryptoJS.AES.encrypt(text, keyData, { iv: ivData,  mode: CryptoJS.mode.CBC, padding: CryptoJS.pad.Pkcs7 });
     return encrypted.toString();