Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I am just wondering what is the most common, or most used, block cipher mode used that goes with CTS?

Is it “ECB” or “CBC”?

share|improve this question
What is CTS? CipherText Stealing? –  poncho Mar 8 '13 at 19:43
Yes. I guess this is really a matter of opinion. –  h221baker Mar 8 '13 at 20:10
You should not use ECB at all (it is insecure), so I hope it is not "usual". –  Paŭlo Ebermann Mar 8 '13 at 20:24
add comment

1 Answer

up vote 2 down vote accepted

There is a NIST definition of CTS (CipherText Stealing) mode at: http://csrc.nist.gov/publications/nistpubs/800-38a/addendum-to-nist_sp800-38A.pdf.

The title of that addendum answers the question: "Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode".

The paper is also useful to understand that there are many different ways to do ciphertext stealing.

share|improve this answer
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.