[question] AES GCM — iv length

[nichoth]

It looks like the iv length is defaulting to 16 bytes

From this discussion, it seems 12 bytes is preferable.

Thoughts about this?

[matheus23]

Yes. It's better to have an iv length of 12 with AES-GCM.
This library has a bunch of suboptimal defaults - e.g. around utf8 vs. utf16 encoding, too, or having AES-CTR instead of AES-GCM as default.
We moved away from it during the time at fission and spent effort on the rust parts instead (so mostly rs-wnfs).

If one wanted a good library like this today, I'd recommend just going with uint8arrays, localforage + the WebCrypto API directly.