Skip to main content
Clean-up
Source Link
Cryptographeur
  • 4.3k
  • 2
  • 29
  • 40

reusing materiels IV/Nonce in AES differentCTR&GCM mode of operation modes (CTR, GCM)

We know reusing IV can compromise our secrecy. here are myI have some questions:

1-is that OK aiming to useclarify the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? and how many time we can reuse same key to encrypt plain-text ?

2-What's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 ... but there is a random IV before counter to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode? from Wikipedia article i thought the right word is IV+counter instead of saying nonce or am i wrong?)

3-What is the right way to generate an IV (first half of nonce) to encrypt plain-text/Nonce in CTR or GCM modes ? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly! why ?)/GCM:

  1. Is it OK to use the same key for encrypting plain-texts in authenticated encryption (GCM) and confidential only encryption (CTR) if we use a random IV to encrypt each plain-text? How many time we can reuse the same key in this way?

  2. What's different between "IV" and "nonce" in CTR or GCM mode? (I know there is a counter within the algorithm, but there is some IV before the counter to encrypt each block. From Wikipedia, I thought the correct term was IV+counter instead of saying nonce?)

  3. What is the right way to generate the IV for CTR or GCM modes? Should we use a TRNG or CSPRNG? Some comments imply the nonce shouldn't be random - why is this?

reusing materiels in AES different operation modes (CTR, GCM)

We know reusing IV can compromise our secrecy. here are my questions:

1-is that OK to use the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? and how many time we can reuse same key to encrypt plain-text ?

2-What's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 ... but there is a random IV before counter to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode? from Wikipedia article i thought the right word is IV+counter instead of saying nonce or am i wrong?)

3-What is the right way to generate an IV (first half of nonce) to encrypt plain-text in CTR or GCM modes ? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly! why ?)

IV/Nonce in CTR&GCM mode of operation

We know reusing IV can compromise our secrecy. I have some questions aiming to clarify the use of an IV/Nonce in CTR/GCM:

  1. Is it OK to use the same key for encrypting plain-texts in authenticated encryption (GCM) and confidential only encryption (CTR) if we use a random IV to encrypt each plain-text? How many time we can reuse the same key in this way?

  2. What's different between "IV" and "nonce" in CTR or GCM mode? (I know there is a counter within the algorithm, but there is some IV before the counter to encrypt each block. From Wikipedia, I thought the correct term was IV+counter instead of saying nonce?)

  3. What is the right way to generate the IV for CTR or GCM modes? Should we use a TRNG or CSPRNG? Some comments imply the nonce shouldn't be random - why is this?

more details
Source Link

block ciphers mode of operations and key reuse reusing materiels in AES different operation modes (CTR, GCM)

We know reusing IV can compromise our secrecy. here are my questions:

What's1-is that OK to use the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? and how many time we can reuse same key to encrypt plain-text ?

2-What's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 ... but there is a random IV before counter number to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode  ?! from Wikipedia article i thinkthought the right word is IV+counter number instead of saying nonce or am i wringwrong?)

is it OK to use the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain3-text? Or is that a bad idea?

Also WhatWhat is the right way to generate a IVan IV (first half of nonce) to encrypt plain-text within CTR or GCM modes ? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly  ! why ?)

Update: We use AES as cipher

block ciphers mode of operations and key reuse

We know reusing IV can compromise secrecy.

What's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 .. but there is a random IV before counter number to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode  ?! i think the right word is IV+counter number instead of saying nonce or am i wring?)

is it OK to use the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? Or is that a bad idea?

Also What is the right way to generate a IV (first half of nonce) to encrypt plain-text with GCM? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly  ! why ?)

Update: We use AES as cipher

reusing materiels in AES different operation modes (CTR, GCM)

We know reusing IV can compromise our secrecy. here are my questions:

1-is that OK to use the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? and how many time we can reuse same key to encrypt plain-text ?

2-What's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 ... but there is a random IV before counter to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode? from Wikipedia article i thought the right word is IV+counter instead of saying nonce or am i wrong?)

3-What is the right way to generate an IV (first half of nonce) to encrypt plain-text in CTR or GCM modes ? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly! why ?)

added 552 characters in body
Source Link

We know reusing IV can compromise secrecy.

Is thatWhat's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 .. but there is a random IV before counter number to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode ?! i think the right word is IV+counter number instead of saying nonce or am i wring?)

is it OK to use the same key for encrypting unlimited plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? Or is that a bad idea?

Also What is the right way to generate a IV (first half of nonce) to encrypt plain-text with GCM? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly ! why ?)

Update: We use AES as cipher

We know reusing IV can compromise secrecy.

Is that OK to use same key for encrypting unlimited plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR) if we use random IV to encrypt each plain-text? Or is that a bad idea?

Update: We use AES as cipher

We know reusing IV can compromise secrecy.

What's different between IV and nonce in CTR or GCM mode? (i know there is a counter nonce 001 002 003 .. but there is a random IV before counter number to encrypt each block and some experts in comments are saying we have no IV in CTR or GCM mode ?! i think the right word is IV+counter number instead of saying nonce or am i wring?)

is it OK to use the same key for encrypting plain-texts in authenticated encryption (GCM), or confidential only encryption (CTR), if we use random IV to encrypt each plain-text? Or is that a bad idea?

Also What is the right way to generate a IV (first half of nonce) to encrypt plain-text with GCM? should we use TRNG or CSPRNG? (in comments experts are saying we shouldn't choose nonce (first half) randomly ! why ?)

Update: We use AES as cipher

added 34 characters in body
Source Link
Loading
Minor language fix.
Source Link
e-sushi
  • 18.1k
  • 12
  • 85
  • 235
Loading
deleted 13 characters in body
Source Link
Loading
Source Link
Loading