Why using AES in ECB (Electronic Code Book) mode a bad idea? is CTR mode better? Given only these two can be used for parallelization.

  • $\begingroup$ On the other hand, that makes your post's title completely different from your post's body. $\;$ $\endgroup$ – user991 May 31 '15 at 9:56
  • $\begingroup$ There are other parallelizable modes as well. Such as XTS and OCB. But to recommend a mode we need to understand your requirements. $\endgroup$ – CodesInChaos May 31 '15 at 11:51

ECB is bad because identical plaintext blocks result in identical ciphertext blocks. Encrypted data is therefore not pseudo-random.

This is how Tux looks like after ECB encryption:


CTR mode doesn't have this problem. Data encrypted with CTR mode is pseudo-random and doesn't show any pattern. So CTR is much better.

CBC and CFB can also decrypt parallel, but not encrypt.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.