0
$\begingroup$

So I was researching Initialization Vectors (IV) and even took a look at this thread... What is the main difference between a key, an IV and a nonce? ,but I was hoping that I could get some clarity.

Everyone keeps saying they IVs need to be public because the recipient of a cryptographic message will need to first decrypt the cipher text with the cryptographic key, and then the recipient must have the IV to derive the original plaintext message... so whats the point of having the IV public if its there to increase confidentiality.. like if a threat-actor has the key then they can grab the plaintext straight up..

Please let me know if I am completely off.

Improve this question
$\endgroup$
4
  • 2
    $\begingroup$ I don't think that the linked Q/A has needed another answer. The key provides confidentiality, nothing else. IV is used to randomize encryption (probabilistic encryption). nothing more (ECB has not one). As you said, without the IV some of the messages cannot be decrypted like in CBC mode the first block is lost. In CTR, all is lost. When the adversary has access the key then all lost, even you encrypt it with the ECB mode. $\endgroup$
    – kelalaka
    Sep 30, 2020 at 18:16
  • $\begingroup$ So to my understand... IV is a useless number, other than just to ensure uniqueness of the cipher text? $\endgroup$
    – payam hojjat
    Sep 30, 2020 at 18:37
  • $\begingroup$ Useless? How can you achieve Probabilistic Encryption without IV? IV stands for nonce and random, too ( of course there is a distinction). In Modern Cryptography IV is important to achieve CPA security. A necessary condition for modern cryptography. See the ECB penguin on the Wikipedia page on Modes of Operations. $\endgroup$
    – kelalaka
    Sep 30, 2020 at 18:40
  • $\begingroup$ If you are using CTR mode, and you encrypt the IV with the same key you are gonna have a bad time $\endgroup$
    – Richie Frame
    Sep 30, 2020 at 23:38

1 Answer 1

Reset to default
3
$\begingroup$

@kelalaka's comment answers this very succinctly, but in the event that a slightly more in-depth explanation helps, here's my stab at it.

The initialization vector is to encryption as a salt is to salted-hashing/key-derivation. It ensures that if, in a given protocol, the same values are used multiple times, the output will still appear random instead of repeating.

With salted hashing (or key derivation) you are using a known deterministic process to generate an output value. The salt adds additional entropy to help ensure the result is apparently random. If the same value is hashed twice without a salt, the hash is the same. When a unique salt is added to each hash input, we help ensure that the outputs are different. Even if the output is coincidentally the same (usually extremely unlikely), we introduce doubt that the original input was the same.

Encryption needs to be reversible and, as a result, the algorithms are similarly deterministic. And, in many protocols, keys are re-used to encrypt many messages. In the event that the same message (plaintext) is encrypted twice with the same key, we risk revealing that fact by producing the same encrypted output (ciphertext). To avoid this, we include the initialization vector. When a unique initialization vector is used for each message, we help ensure that the outputs are different. And, again, even if the outputs are the same, the fact that a different initialization vector was used makes it extremely unlikely that the original message is the same.

Finally, it's also important to note that the IV being tied to a given act of encryption means that it is not always practical to agree an IV ahead of time, as you might for the key itself. In addition, if the key is still secret, getting the IV to your recipient is all that matters, as the key is what you are relying on to keep your encrypted data safe, not the IV. So transmitting the IV publicly isn't a problem. It's effectively just a parameter of the algorithm you used to encrypt the message.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.