Timeline for Why verify padding at all?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 10, 2014 at 4:20 | comment | added | otus | @BoppreH, finding the last byte of the last block only revels the exact plaintext length. However, the attacker can truncate the ciphertext by one block, then repeat the same and find the last plaintext byte of each block. | |
| Sep 10, 2014 at 3:30 | comment | added | BoppreH | Wouldn't that only reveal the block size, though? Anything smaller is valid and may truncate or expand the message with the random padding; anything larger gives an error (or not!). | |
| Sep 9, 2014 at 5:48 | history | answered | otus | CC BY-SA 3.0 |