Next badge 0/1
~1k people reached
- 0 posts edited
- 0 helpful flags
- 1 votes cast
AES CBC with fixed or predictable IV, what are the risks?
Thanks. I will try to implement CMAC.Almost every block contains a parameter name. So, if the attacker changes the block N-1 with something that looks like random plaintext. The application "B" will reject the request. My other concern is about the secret key. Wikipedia says that chosen plaintext attack can reveal the secret key. But maybe this don't apply to AES with CBC algo.
Using CBC with a fixed IV and a random first plaintext block
The ciphertext is transmited in a data structure using a Web Service. So adding an IV force me to change the Web Service... and I am not the only one using this Web Service.