1
$\begingroup$

The normal way of using AES-CBC is to XOR the IV with the first plaintext block aes-cbc encryption aes-cbc decryption

This way you have to pass the IV along the ciphertext.

What if instead of XORing we just put a fixed size randomIV in front of the plaintext:

Encrypt(randomIV + plaintext) = C1

And we don't have to send/tansmit separatly the IV since it is inside C1. Decryption works similarly:

Decrypt(C1) = randomIV + plaintext

And we just remove the randomData (fixed size) to end up with the plaintext.

In essence, the first block of random data, when encrypted will work EXACTLY as a randomIV since it will be XORed with the second block

Except from performance loss (having to encrypt an additional block instead of XORing), can you think why this might not be secure.

Improve this question
$\endgroup$
0

1 Answer 1

Reset to default
2
$\begingroup$

If I got you right, you propose to encrypt IV and then run the same CBC-mode encryption using the encrypted IV; it just gives an adversary one more ciphertext block.

Improve this answer
$\endgroup$
1

Not the answer you're looking for? Browse other questions tagged or ask your own question.