Timeline for Best practices for IV generation
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Sep 28, 2019 at 10:01 | history | suggested | Patriot | CC BY-SA 4.0 |
minor mistakes
|
| Sep 28, 2019 at 3:01 | history | tweeted | twitter.com/StackCrypto/status/1177780311498907648 | ||
| Sep 27, 2019 at 22:34 | review | Suggested edits | |||
| S Sep 28, 2019 at 10:01 | |||||
| Sep 27, 2019 at 22:16 | answer | added | Maarten Bodewes♦ | timeline score: 2 | |
| Sep 27, 2019 at 22:10 | comment | added | Ilmari Karonen | In that case, see crypto.stackexchange.com/questions/3883/… and possibly crypto.stackexchange.com/questions/47328/…. But note that CBC mode without a MAC can be malleable and vulnerable to padding oracle attacks regardless of how the IVs are chosen. | |
| Sep 27, 2019 at 20:24 | comment | added | Crypto_dxb | lets assume CBC mode | |
| Sep 27, 2019 at 20:23 | comment | added | Swashbuckler | In addition to the mode, are you intending to use a key with more than one IV? If not, then for most modes it doesn't even have to be random (assuming key generation is random). | |
| Sep 27, 2019 at 20:20 | comment | added | Ilmari Karonen | Some earlier related questions: crypto.stackexchange.com/questions/47317/…, crypto.stackexchange.com/questions/1312/…, crypto.stackexchange.com/questions/2576/…, crypto.stackexchange.com/questions/3504/… and crypto.stackexchange.com/questions/3965/… | |
| Sep 27, 2019 at 20:14 | comment | added | Ilmari Karonen | Which encryption mode are you using? They have different IV / nonce requirements. With something like SIV mode you don't even necessarily need a nonce at all, as it generates its own "synthetic IV" from the plaintext (and any associated data). | |
| Sep 27, 2019 at 19:59 | history | asked | Crypto_dxb | CC BY-SA 4.0 |