Tagged Questions
0
votes
2answers
128 views
Why nobody considers counter re-keying as a standard Block Cipher Mode?
One of the simplest possible cipher modes is setting each successive key as a function F of the previous one.
K[0] = Master key
C[i] = E(K[i],P[i]), K[i]=F(K[i-1])
This is similar to the counter ...
2
votes
1answer
166 views
Why doesn't CTR mode require blocking?
I've been reading a bit about block cipher modes and I have a relatively straightforward question regarding CTR. In essence, I was hoping you guys would be kind enough to validate my understanding of ...
4
votes
1answer
421 views
Deterministic nonces in CTR mode
I want to encrypt a file with AES in CTR mode. I have a 256 bit master key and the file. Given these, the encryption must be deterministic, so I can't use a random nonce in the usual way. Fortunately ...
2
votes
3answers
1k views
Which one of the Block Cipher modes is the best?
I have two questions regarding the Block Cipher Modes:
First: Which one of the modes is considered the best?
I know CBC has a problem of IV since the next block of the plain text is XORed with the ...
4
votes
2answers
209 views
Is it safe to store initial counter value for AES-CTR alongside with ciphertext?
The initial counter value can actually be thought of as a sort of IV, which I assume is safe to transmit with the ciphertext, but I really want to be sure that this is indeed safe.
