Linked Questions
29 questions linked to/from Bit Flipping Attack on CBC Mode
2
votes
1
answer
2k
views
AES-CBC ciphertext manipulation with known IV and plaintext! [duplicate]
I'm currently practicing on a purposely flawed login page, where I have to change the value of a cookie to enter. The cookie is an encrypted and encoded form of a simple JSON string with fields "admin"...
- 23
0
votes
0
answers
71
views
Alter CBC plaintext by altering IV [duplicate]
I am building on this answer. Essentially I have an initialisation vector $iv$, a ciphetext $c$ and a plaintext $p$. The plaintext was encrypted using AES CBC. The aim is to modify the first 4 ...
- 421
0
votes
0
answers
27
views
CBC byte flipping attack [duplicate]
I'm learning how CBC works but i don't understand when altering the first 2 bytes of the ciphered text why the 1rst block and ONLY the first 2 bytes of the second block are altered. The first 2 bytes ...
67
votes
1
answer
33k
views
Easy explanation of "IND-" security notions?
There are many schemes that can advertise themselves with certain security notions, usually IND-CPA or IND-CCA2, for example plain ElGamal has IND-CPA security but doesn't provide IND-CCA security.
...
- 45.6k
13
votes
4
answers
8k
views
Disadvantages of AES-CTR?
On paper, it sounds *very* good to me:
secure
fast (in my tests it's somewhat slower than ECB (but without most of the weaknesses, more on that below) but faster than every other alternative I tested,...
- 487
3
votes
3
answers
4k
views
Is CTR more secure than CBC?
In cryptography, a block cipher mode of operation is an algorithm that uses a block cipher to provide information security such as confidentiality or authenticity. A block cipher by itself is only ...
- 73
6
votes
2
answers
8k
views
Why does error propagation in CBC mode encryption affect two blocks?
From Wikipedia:
Error propagation
It was common to discuss the "error propagation" properties as a selection criterion for a mode of operation. It might be observed, for example, that a one-...
- 477
1
vote
4
answers
388
views
Are there any cryptographic algorithms, which lets the user apply some modifications on the encoded data, without decoding it?
I would like to encode some data with a key, and send it to a third party. They don't know the key to decode it, but I would like to make it possible for them to apply some modifications on it. Then ...
- 113
3
votes
3
answers
3k
views
Example of a cut-and-paste attack on CBC
I am reading the cryptography book by Stamp and there is a cut-and-paste attack on $ECB$ and this is easy to follow because $ECB$ is relatively simple, the problem is that I would like to see an ...
- 131
3
votes
2
answers
966
views
AES-CBC decrypts to wrong output?
Someone I know showed this to me, and I can't put a finger to why it's happening. Am I missing something?
They encrypt the text, and the output is really guessable. $u\to t$, $i\to h$ (it's one letter ...
- 43
3
votes
2
answers
4k
views
What is a good AES mode to use on file encryption?
I'm new to encryption and cryptography, I was wondering if there is a good or best suited AES mode for file encryption (Planning on zipping a folder and encrypt it as a file). If there is, how complex ...
- 31
2
votes
2
answers
2k
views
using different IV and SALT with AES-CBC but same KEY
I'm working on this project where a client can send a message, now obviously sending it in plainText is not very smart. So I decided to Encrypt it with AES-CBC.
Now, each time I encrypt something, the ...
- 47
2
votes
2
answers
871
views
Distinguishing the correct IV from incorrect IV in AES CBC when key is known
Currently, I'm using a static IV value for all encryption and decryption but I would like it to be dynamic for each encyption/decryption request so I started using new byte[16] and it works. The ...
2
votes
1
answer
2k
views
Can you change an AES encrypted message if you control the IV?
Let's say that an attacker has the plaintext, the ciphertext and the IV of a specific message. If the attacker can control the ciphertext and the IV, could he forge valid plaintext? Let's say that the ...
- 21
2
votes
1
answer
1k
views
Can you use RSA in “CBC mode”?
Are there any security concerns with using RSA in “CBC mode”?
Specifically: if I use RSA encryption as my block cipher operation, and apply the standard CBC mode operations including a random IV, will ...
