Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

If I have a string encoded with AES CBC with PKCS#5 padding, how can one possibly decrypt/crack it? What are the approaches that one can take to break its security?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

You may take the following approaches:

  1. You can check if the key generation or storage has any weaknesses;
  2. You can check if padding oracle attacks apply;
  3. You can check if (part of) the ciphertext has been generated previously (using the same IV).

Neither of these methods work when AES CBC has been correctly applied. AES does provide adequate confidentiality, even for many ciphertext&plaintext pairs.

share|improve this answer
    
This answermay not be cover all attacks. –  owlstead Feb 14 '13 at 11:59
    
Thanks for your answer, would you help me understand padding oracle attacks better? All of the articles I found on the net were too 'mathematical'. I'd like to learn in with a practical approach. –  Wise Feb 14 '13 at 18:13
    
A quick Google search already shows some results: limited-entropy.com/padding-oracle-attacks –  owlstead Feb 14 '13 at 18:23
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.