If I have a string encoded with AES CBC with PKCS#5 padding, how can one possibly decrypt/crack it? What are the approaches that one can take to break its security?
You may take the following approaches:
- You can check if the key generation or storage has any weaknesses;
- You can check if padding oracle attacks apply;
- You can check if (part of) the ciphertext has been generated previously (using the same IV).
Neither of these methods work when AES CBC has been correctly applied. AES does provide adequate confidentiality, even for many ciphertext&plaintext pairs.