21 reputation
2
bio website
location
age
visits member for 1 year, 3 months
seen Feb 4 '13 at 22:33

Feb
3
awarded  Supporter
Feb
3
comment AES CBC with fixed or predictable IV, what are the risks?
Thanks. I will try to implement CMAC.Almost every block contains a parameter name. So, if the attacker changes the block N-1 with something that looks like random plaintext. The application "B" will reject the request. My other concern is about the secret key. Wikipedia says that chosen plaintext attack can reveal the secret key. But maybe this don't apply to AES with CBC algo.
Feb
3
asked AES CBC with fixed or predictable IV, what are the risks?
Jan
20
comment Using CBC with a fixed IV and a random first plaintext block
The ciphertext is transmited in a data structure using a Web Service. So adding an IV force me to change the Web Service... and I am not the only one using this Web Service.
Jan
19
awarded  Student
Jan
19
asked CBC with fixed IV but changing data