The current Apex Crypto Class in Salesforce only supports AES encryption in CBC mode, which is susceptible to padding oracle attacks. To enhance security, it is important for the Apex Crypto Class to also support more robust encryption algorithms, such as AES in GCM and CCM modes, which have been available for some time. Implementing these advanced encryption modes would significantly improve data protection and align with modern security standards.
Hi there, hopefully you've noticed but just ran across this post so thought I'd share that apex crypto now supports GCM: https://help.salesforce.com/s/articleView?id=release-notes.rn_256_gcm_p1363.htm&release=256&type=5
We have had other requests that we have been actively working on (under forward looking statement \ safe harbor as always!). Please keep the feedback coming via IdeaExchange, thanks!