Hazelnoot [she/her]

I hope you didn’t literally use XOR

It’s XOR(key, block) with IV and chaining: https://github.com/RommieEcho/qrcatalyst-open/blob/main/src/routes/anon/XORCipher.js

Since it’s chained at the byte level, you can strip it out by just XORing each byte against all following bytes. Then the IV can be XORed out of the first block, at which point you have just a series of XOR(key, plaintext) blocks that can be attacked with conventional methods.

here’s an archived copy: https://web.archive.org/web/20250118011532/http://www.hhs.gov/sites/default/files/intersex-health-equity-report.pdf