Skip to main content
polish
Source Link
kelalaka
  • 49.5k
  • 12
  • 119
  • 205

i'mI'm struggling with understanding this part of the literature:

It can be assumed that the entire ciphertext AND plaintext is known.

part of the literature

Considering the encryption method is $C_i = enc_k ( P_i \oplus C_{i-1})$ with a key k, and the decryption method is $P_i = dec_k(C_i) \oplus C_{i-1}$.

Why does it say in equation (2) say that we can generate the desired ciphertext of the previous block this way?

Also shouldn't the equation (3) formula be: $P'_{i-1} = ...$ instead of $P_{i-1} = ...$

I don't really get equation (4) and why is it different tofrom equation (2)?

Any help appreciated Thanks!.

i'm struggling with understanding this part of the literature:

It can be assumed that the entire ciphertext AND plaintext is known.

part of the literature

Considering the encryption method is $C_i = enc_k ( P_i \oplus C_{i-1})$ with a key k, and the decryption method is $P_i = dec_k(C_i) \oplus C_{i-1}$.

Why does it say in equation (2) say that we can generate the desired ciphertext of the previous block this way?

Also shouldn't the equation (3) formula be: $P'_{i-1} = ...$ instead of $P_{i-1} = ...$

I don't really get equation (4) and why is it different to equation (2)?

Any help appreciated Thanks!

I'm struggling with understanding this part of the literature:

It can be assumed that the entire ciphertext AND plaintext is known.

part of the literature

Considering the encryption method is $C_i = enc_k ( P_i \oplus C_{i-1})$ with a key k, and the decryption method is $P_i = dec_k(C_i) \oplus C_{i-1}$.

Why does it say in equation (2) say that we can generate the desired ciphertext of the previous block this way?

Also shouldn't the equation (3) formula be: $P'_{i-1} = ...$ instead of $P_{i-1} = ...$

I don't really get equation (4) and why is it different from equation (2)?

Any help appreciated.

Source Link

How to create the ciphertext that generates a desired plaintext in CBC (previous cipher- and plaintext are known)

i'm struggling with understanding this part of the literature:

It can be assumed that the entire ciphertext AND plaintext is known.

part of the literature

Considering the encryption method is $C_i = enc_k ( P_i \oplus C_{i-1})$ with a key k, and the decryption method is $P_i = dec_k(C_i) \oplus C_{i-1}$.

Why does it say in equation (2) say that we can generate the desired ciphertext of the previous block this way?

Also shouldn't the equation (3) formula be: $P'_{i-1} = ...$ instead of $P_{i-1} = ...$

I don't really get equation (4) and why is it different to equation (2)?

Any help appreciated Thanks!