0
$\begingroup$

Assuming that I'm using fixed IV's for CBC mode and CTR mode. I know that in CBC, the blocks depend on the previous ones and on CTR they are all independent. Yet with the same key and fixed IV, the system wouldn't be secure in CTR and with fixed IV same plaintext would be converted to same ciphertext which causes another security issue. Even though I know these, I cannot decide which would be more secure when I use fixed IV's. Any help is appreciated.

New contributor
imageprocessingproblem is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
$\endgroup$
4
  • 5
    $\begingroup$ I cannot decide - Nobody can decide it for you. Re-formulate you question, so that it can be answered here. For instance, you can ask I such approach vulnerable to the problem A? ... to the problem B? Only you can decide what problems and what risks are acceptable to you. $\endgroup$ – mentallurg Apr 8 at 2:09
  • 1
    $\begingroup$ Hello @mentallurg, thank you for your comment, yet I was studying for my network security exam coming up and I'm using the textbook Information Security Principles and Practice 2nd Edition by Mark Stamp and on chapter 3.6 Problems 31. problem is exactly like follows: "Suppose that Alice and Bob decide to always use the same IV instead of choosing IVs at random. If the same IV is always used, which is more secure, CBC or CTR mode?" So this is not a question I just made up on my own. $\endgroup$ – imageprocessingproblem Apr 8 at 9:33
  • $\begingroup$ Hint: look at what a key stream is and how OTP's can be broken with key reuse. That should give you the answer. $\endgroup$ – Maarten Bodewes Apr 8 at 9:43
  • $\begingroup$ @MaartenBodewes, thank you. Gonna check that out! $\endgroup$ – imageprocessingproblem Apr 8 at 9:48

Your Answer

imageprocessingproblem is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.