Skip to main content
Made minor readability fixes. Also added "chosen-plaintext-attack" tag.
Source Link

Why is CBC with predictable IV considered insecure against CPAchosen-plaintext attack?

I just learned that using CBC encryption with an IV which is predictable is not secure.

From what I understand, using certain plain texts, and then guessing the IV that isit uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack?

Why is CBC with predictable IV considered insecure against CPA

I just learned that using CBC encryption with an IV which is predictable is not secure.

From what I understand, using certain plain texts, and then guessing the IV that is uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack?

Why is CBC with predictable IV considered insecure against chosen-plaintext attack?

I just learned that using CBC encryption with an IV which is predictable is not secure.

From what I understand, using certain plain texts, and then guessing the IV that it uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack?

Tweeted twitter.com/#!/StackCrypto/status/251789079115612160
random → predictable
Source Link
Paŭlo Ebermann
  • 22.8k
  • 7
  • 81
  • 118

Why is CBC with randompredictable IV considered insecure against CPA

I just learntlearned that when using CBC encryption with a randoman IV which is predictable is not secure. 

From what I understand, using certain plain texts, and then guessing the IV that is uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack  ?

Why is CBC with random IV considered insecure against CPA

I just learnt that when using CBC encryption with a random IV which is predictable is not secure. From what I understand, using certain plain texts, and then guessing the IV that is uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack  ?

Why is CBC with predictable IV considered insecure against CPA

I just learned that using CBC encryption with an IV which is predictable is not secure. 

From what I understand, using certain plain texts, and then guessing the IV that is uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack?

Source Link
asudhak
  • 491
  • 1
  • 4
  • 5

Why is CBC with random IV considered insecure against CPA

I just learnt that when using CBC encryption with a random IV which is predictable is not secure. From what I understand, using certain plain texts, and then guessing the IV that is uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack ?