I am wondering: what is the most common, or most used, block cipher mode used that goes with CTS (CypherText Stealing)?
-
1$\begingroup$ What is CTS? CipherText Stealing? $\endgroup$– ponchoMar 8, 2013 at 19:43
-
$\begingroup$ Yes. I guess this is really a matter of opinion. $\endgroup$– h221bakerMar 8, 2013 at 20:10
-
1$\begingroup$ You should not use ECB at all (it is insecure), so I hope it is not "usual". $\endgroup$– Paŭlo EbermannMar 8, 2013 at 20:24
-
$\begingroup$ What is the ebc tag? I sense a typo from e-sushi. $\endgroup$– Artjom B.Jul 14, 2014 at 8:35
1 Answer
There is a NIST definition of CTS (CipherText Stealing) mode in the addendum to NISTSP800-38A.
The title of that addendum answers the question:
"Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode".
The paper is also useful to understand that there are many different ways to do ciphertext stealing.