Skip to main content
Cryptography

Return to Answer

spelling
Source Link
Simon Johnson
Simon Johnson
  • 3.2k
  • 17
  • 20

It depends on the mode of operation. With counter mode, predictable IV's are fine. Of course, a collision in file hashes would result in easy plain-text recovery.

It's probably better to fill the high order 64-bits with the number of microseconds since the unix epoc, pad the rest of the 64-bits with random numbers and the use the low order 64-bits as the counter. It'd be pretty hard tofor IVs to collide in that set-up if encrypting stuff on a local PC.

With CBC they really need to be randomly selected. Predictable CBC IVs can lead to attacks, as BEAST demonstrated.

It depends on the mode of operation. With counter mode, predictable IV's are fine. Of course, a collision in file hashes would result in easy plain-text recovery.

It's probably better to fill the high order 64-bits with the number of microseconds since the unix epoc, pad the rest of the 64-bits with random numbers and the use the low order 64-bits as the counter. It'd be pretty hard to IVs to collide in that set-up if encrypting stuff on a local PC.

With CBC they really need to be randomly selected. Predictable CBC IVs can lead to attacks, as BEAST demonstrated.

It depends on the mode of operation. With counter mode, predictable IV's are fine. Of course, a collision in file hashes would result in easy plain-text recovery.

It's probably better to fill the high order 64-bits with the number of microseconds since the unix epoc, pad the rest of the 64-bits with random numbers and the use the low order 64-bits as the counter. It'd be pretty hard for IVs to collide in that set-up if encrypting stuff on a local PC.

With CBC they really need to be randomly selected. Predictable CBC IVs can lead to attacks, as BEAST demonstrated.

typo
Source Link
Simon Johnson
Simon Johnson
  • 3.2k
  • 17
  • 20

It depends on the mode of operation. With counter mode, predictable IV's are fine. Of course, a collision in file hashes would result in easy plain-text recovery.

It's probably better to fill the high order 64-bits with the number of microseconds since the uniqueunix epoc, pad the rest of the 64-bits with random numbers and the use the low order 64-bits as the counter. It'd be pretty hard to IVs to collide in that set-up if encrypting stuff on a local PC.

With CBC they really need to be randomly selected. Predictable CBC IVs can lead to attacks, as BEAST demonstrated.

It depends on the mode of operation. With counter mode, predictable IV's are fine. Of course, a collision in file hashes would result in easy plain-text recovery.

It's probably better to fill the high order 64-bits with the number of microseconds since the unique epoc, pad the rest of the 64-bits with random numbers and the use the low order 64-bits as the counter. It'd be pretty hard to IVs to collide in that set-up if encrypting stuff on a local PC.

With CBC they really need to be randomly selected. Predictable CBC IVs can lead to attacks, as BEAST demonstrated.

It depends on the mode of operation. With counter mode, predictable IV's are fine. Of course, a collision in file hashes would result in easy plain-text recovery.

It's probably better to fill the high order 64-bits with the number of microseconds since the unix epoc, pad the rest of the 64-bits with random numbers and the use the low order 64-bits as the counter. It'd be pretty hard to IVs to collide in that set-up if encrypting stuff on a local PC.

With CBC they really need to be randomly selected. Predictable CBC IVs can lead to attacks, as BEAST demonstrated.

Source Link
Simon Johnson
Simon Johnson
  • 3.2k
  • 17
  • 20

It depends on the mode of operation. With counter mode, predictable IV's are fine. Of course, a collision in file hashes would result in easy plain-text recovery.

It's probably better to fill the high order 64-bits with the number of microseconds since the unique epoc, pad the rest of the 64-bits with random numbers and the use the low order 64-bits as the counter. It'd be pretty hard to IVs to collide in that set-up if encrypting stuff on a local PC.

With CBC they really need to be randomly selected. Predictable CBC IVs can lead to attacks, as BEAST demonstrated.