title: Powershell and AES: If the Salt and IV are both fixed or known, is the encryption inherently unsafe or easier to crack?
body: <p>I have recently been using <a href="http://gallery.technet.microsoft.com/scriptcenter/PowerShell-Script-410ef9df" rel="nofollow">this script</a> to do some data encryption for a different script that I will later on be passing to other users, and I'm currently using a fixed IV and Salt. The reason I am currently using a fixed Salt and IV is that the data I have encrypted only needs to be encrypted once, but will need to be decrypted every time my script is run. As such, having everything fixed means that only the password needs to be known to other users of my script.</p>
  
  <p>From reading around, it seems that having the Salt known does not make too much difference to the ease at which the data can be maliciously decrypted if it is unique, however I assume that by using a fixed Salt I am currently mooting the point of applying it. </p>
  
  <p>My Password that I am passing into this script is entered at the point of encryption/decryption, and is not stored anywhere. 
  By keeping the Password completely secret, does this strengthen the encryption somewhat? </p>
  
  <p>In addition, does anyone have any advice for a potentially safer implementation? </p>
  
  <p>Many thanks for all help.</p>