Timeline for File encryption with AES CTR mode
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 19, 2015 at 12:09 | comment | added | SEJPM | The reason why nobody uses plain CTR for disk encryption is that bit flips propagate into the plaintext. If you flip a bit of the ciphertext the same bit of the plaintext gets flipped, allowing you fine-grained control about many things. F.ex. assume you have a file saying: "give bob 1000€", then if you know this is standing there you can easily flip bits and change it to "give bob 0001€". You'd be able to do this with all information. CBC and other modes prevent this to some extent. | |
| Aug 19, 2015 at 11:59 | answer | added | otus | timeline score: 4 | |
| Aug 19, 2015 at 11:57 | comment | added | CodesInChaos | Reused kev/iv pairs amount to a many-time-pad. For many kinds of data, such as txt or html files this leaks a lot of information seeing 2 versions and nearly perfect recovery seeing 3 versions. We have several questions about that, just search a bit. | |
| Aug 19, 2015 at 10:57 | comment | added | Thomas | Citation needed... if you are reusing nonces in CTR mode you're not doing it right (and ditto if you're using CTR to encrypt hard drives) | |
| Aug 19, 2015 at 10:52 | review | First posts | |||
| Aug 19, 2015 at 13:31 | |||||
| Aug 19, 2015 at 10:49 | history | asked | Anders HK | CC BY-SA 3.0 |