Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Lets say , if we encrypt a plain text message $msg$ with key $key$ in below two ways. Which is the below would give better deterministic encryption and why ?

  1. AES-ECB($key$ , $msg$)
  2. SIV($key$, NIL , $msg$) where associated data is NIL.

I could not make out much from Rogaway , Shrimpton's paper on "Deterministic Authenticated Encryption" which introduces Synthentic IV (SIV) mode.

Edit: Here $msg$ is same as single block .

share|improve this question
1  
SIV. As long as an adversary never submits exactly the same message the ciphertext remains indistinguishable from random bits –  figlesquidge Feb 19 at 12:57
1  
No, in ECB mode submitting the same block will leak information - rather than SIV where the entire message must be the same to leak information –  figlesquidge Feb 19 at 13:18
1  
For a single block, ECB is perfectly fine. –  CodesInChaos Feb 19 at 15:40
2  
Imagine some data type that is 128 bits like say IPv6 address and for some reason i want to encrypt it deterministically. –  sashank Feb 19 at 16:32
1  
If your input never gets longer than 128 bits, SIV and ECB provide identical security guarantees. –  pg1989 Feb 21 at 3:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.