Don't use the term ECB 😱

[emanjon]

https://csrc.nist.gov/News/2022/proposal-to-revise-sp-800-38a

That RFC 9001 says it uses ECB is a disaster. It have heard people stating several times that ECB is ok in other settings as it is used by QUIC.

Stating that you use ECB will soon be non-compliant as NIST will soon disallow ECB.

https://csrc.nist.gov/News/2022/proposal-to-revise-sp-800-38a

"the use of ECB to encrypt confidential information constitutes a severe security vulnerability"
"In the revision, NIST proposes to limit the approval of ECB to instances that are specifically allowed by other NIST standards or guidance."

Please reformulate to state that you use AES encryption or AES-CTR, AES-CBC, AES-OFB, or AES-CFB.