Questions tagged [cbc]

Cipher block chaining (CBC) is a method for encrypting large amounts of data with a block cipher that can only encrypt fixed length plaintexts. When used with an unpredictable initialization vector (IV), it is secure against chosen plaintext attacks (CPA-secure).

Filter by
Sorted by
Tagged with
5
votes
1answer
2k views

Is the Java function AES/CBC/PKCS5Padding vulnerable to padding oracle?

I have an application that stores data on the devices. Currently AES/CBC/PKCS5Padding from javax.crypto.Cipher(see reference) is ...
0
votes
1answer
112 views

AES/GCM/PKCS5Padding giving issues while AES/CBC/PKCS5Padding works fine for my use case

I have a requirement to read-encypt-save plus its reverse i.e. read-decypt-save files through chunk/block mechanism (single operation not feasible because of huge(GBs) file sizes). So essentially the ...
0
votes
1answer
63 views

Comparing the security when using fixed IV for CBC and CTR

Assuming that I'm using fixed IV's for CBC mode and CTR mode. I know that in CBC, the blocks depend on the previous ones and on CTR they are all independent. Yet with the same key and fixed IV, the ...
1
vote
0answers
51 views

Proving Security of a Tweakable Block Cipher in CBC Mode (Threefish)

I want to prove the security of a Tweakable Block Cipher in CBC Mode How does one prove the security of a Tweakable block cipher (ie Threefish) in CBC mode with a random IV and a constant (public) ...
41
votes
2answers
59k views

AES CBC mode or AES CTR mode recommended?

What are the benefits and disadvantages of CBC vs. CTR mode? Which one is more secure?
0
votes
1answer
72 views

Which encryption technique should be adopted to keep the search functionalities?

I am in exactly the same situation as described in this post. I must be able to encrypt data from a client workstation then send it to an untrusted server (encrypted at rest), then decrypt it only on ...
2
votes
1answer
73 views

How to create the ciphertext that generates a desired plaintext in CBC (previous cipher- and plaintext are known)

I'm struggling with understanding this part of the literature: It can be assumed that the entire ciphertext AND plaintext is known. Considering the encryption method is $C_i = enc_k ( P_i \oplus C_{...
4
votes
2answers
184 views

Substitution ciphers amended with cipher block chaining: susceptible to frequency analysis?

I have been studying ways to amend a simple substitution cipher, and one of the toy suggestions was to use CBC in the following way: identify each letter with a number from $0\ldots 25$ start with a ...
1
vote
1answer
41 views

Exploitability of AES in CBC Mode For Recovery of Plain Text

I'm aware of existing literature that shows in a comprehensive manner just how simple it is to tweak the ciphertext of AES-CBC such that the decrypted message ends up being entirely different than ...
1
vote
1answer
141 views

Finding the IV of AES CBC (CTF)

We have a python program that encrypts/decrypts plaintext given in hex to a cipher using AES CBC. We know that the IV is the same and is not going to change (it is stored in a file). How can we ...
0
votes
1answer
57 views

Is it safe to reuse an IV 100 times to a single key with AES CBC? [duplicate]

I have a unique 6 digit number that I am generating a IV from. I am trying to make it as unique as possible. From my programming, I am able to get it down to only have 100 duplicate IVs per unique 6 ...
3
votes
2answers
496 views

AES-CBC decrypts to wrong output?

Someone I know showed this to me, and I can't put a finger to why it's happening. Am I missing something? They encrypt the text, and the output is really guessable. $u\to t$, $i\to h$ (it's one letter ...
9
votes
0answers
1k views

Why does the Signal protocol use AES/CBC instead of AES/GCM?

AES/GCM has obviously proved itself to be better than AES/CBC. Unless the key is re-used with the same initialization vector (see disadvantages of GCM). More information on its advantages against CBC ...
2
votes
0answers
89 views

An exercise to show that CBC Chain is insecure

The CBC-Chain mode of operation is a CBC variant in which the IV that is used for the very first message to be encrypted is randomly selected, whereas the IV used for each subsequent encrypted message ...
2
votes
2answers
436 views

How do I find out whether a message in CBC has padding?

When a program is decrypting a message encrypted by CBC mode, what does it find out, whether the last bytes of the last block is part of the padding or part of the plaintext? Example: Use CBC mode ...
1
vote
2answers
495 views

Cipher Block Chaining

I don't want the answer to this problem, I just want to understand the steps that need to be followed to solve it. Maybe an example could help. Problem We use $\mathbin\Vert$ for concatenation. ...
0
votes
0answers
65 views

Is it more secure to use Diffie-Hellman to generate a symmetric AES key for use with CBC, rather than use CBC directly atop RSA encryption?

Short question: If we assume a one-session use public RSA keypair on both sides, and if we assume that the input stream will be split into blocks -- with CBC encryption -- is there any security ...
0
votes
0answers
247 views

Is ECB mode more suitable than CBC mode while encrypting a long bit string?

I know that ECB is less secure than CBC, but will it be suitable for encrypting a long bit string?
1
vote
0answers
28 views

Is it necessary to use an IV in CBC mode when just encrypting one file? [duplicate]

As far as I know, CBC mode, even with a null IV, will encrypt identical plaintext blocks to unique ciphertext blocks within a single file. The purpose of an IV is to obscure the similarities between ...
10
votes
1answer
9k views

Bit Flipping Attack on CBC Mode

To perform a bit flipping attack, the previous block is modified by using XOR. This results in an altered plaintext. However, now the ciphertext of the previous block is altered, hence it will result ...
1
vote
2answers
101 views

Help me understand how to do a crypto assignment about AES/CBC

I'm doing the Coursera cryptography I course from Dan Boneh. I am attempting to do week 2's programming assignment, but I think I am having some sort of misunderstanding of either the theory, the ...
0
votes
0answers
17 views

Does it increase security if the CBC chunks of a AES-256 encrypted bytestream are uploaded to different clouds? [duplicate]

I want to backup my data according to the 3-2-1 rule. I already backup to 2 different drives (2 different systems) at home. In addition i would like to use cloud storage (Google, Amazon etc.). ...
2
votes
2answers
128 views

Does it increase security if the CBC chunks of a AES-256 encrypted bytestream are uploaded to different clouds?

I want to backup my data according to the 3-2-1 rule. I am already back up to 2 different drives (2 different systems) at home. In addition, I would like to use cloud storage (Google, Amazon, etc.). ...
1
vote
1answer
59 views

CBC mode works well for input greater than “b” bits. What is that “b” bits?

This post on geeksforgeeks.org about block cipher modes of operation, says that one of the advantages of the CBC is that it works well for input greater than b bits. I also saw that in the book "...
3
votes
1answer
2k views

Is DES secure under CBC?

I know DES is outdated, but will is is secure in CBC mode? Can anyone help me understand why not?
0
votes
0answers
72 views

Known plaintext attack on AES with CBC

Assume I have a plaintext and a ciphertext, encrypted using some key and AES with CBC mode. I don't have a service, that I can send something to, so I can't use the Padding Oracle attack. Are there ...
2
votes
2answers
191 views

Padding Oracle Attack CBC Mode: If the set of characters of plaintext is known, then can you speed up the process

Consider AES-256, 128-bit blocks, and PKCS#5 Padding. During a Padding Oracle Attack, a manipulated byte of cipher text is sent to the oracle and we eventually hope to find out what that respective ...
3
votes
1answer
140 views

Block Cipher Mode of Operations

I am studying for a test and I don't seem to understand the Block Cipher and its different modes of operations especially when it comes to encrypting and decryption. Could anyone please help solve ...
2
votes
0answers
72 views

Decrypting first byte of plain-text for AES CBC Padding Oracle Attack

I'm working on padding oracle attack and I have a 16 byte cipher on which I need to perform the attack. I've been able to successfully decrypt all the bytes of the plain-text except first byte and I'm ...
0
votes
1answer
50 views

Is it safe to use the CBC-MAC as a Initial Vector and Key Check Value in deterministic encryption?

I want to deterministically encrypt a short message <50 bytes with AES-128 CBC. I also want to be able to detect if the correct key is being used. Ciphertext and IV integrity will be guaranteed by ...
1
vote
0answers
41 views

CBC-MAC variable-length weakness with MAC size greater than the encryption block size

The title mostly explains it; CBC-MAC variable-length weakness with MAC size greater than the encryption block size I've seen that by having the pairs $(M,T_m)$ and $(N,T_n)$, we can generate a ...
0
votes
1answer
124 views

How to alter text that was encrypted with AES CBC using PKCSPadding7

Assuming, I had a ciphertext along with its decrypted plain text result but not the IV or the Secret Key. (keep in mind that the text was encrypted with AES/CBC/PKCSPadding7). How would I go about ...
3
votes
1answer
244 views

AES Padding (Nullbytes vs PKCS7)

I currently implement the AES(128,192,256)(ECB,CBC). Does the type of padding affect security? I just want to fill the blocks with null bytes.
0
votes
0answers
62 views

Can I and How Decrypt this Online

Although I had a security course in school a long time ago, I am effectively new to cryptography. I have an encrypted text, the encryption key of 44 characters, the encryption method, (Fernet, which ...
0
votes
0answers
61 views

Decrypting an AES string

I'm dealing with a website that loads a javascript file which eventually sets an AES hash/value (whatever it's called) as a cookie. The file is heavily obfuscated making it hard to understand certain ...
37
votes
3answers
8k views

Why was AES CBC removed in TLS 1.3?

I don't quite understand why AES CBC was removed in TLS1.3. From what I know CBC is the most secure Mode of operation for the AES block cipher (if you can say it like that). It only needs a TRND IV ...
0
votes
1answer
54 views

In CBC mode of encryption, what happen if the IV is changed when it arrives at the receiver end? [duplicate]

What will happen if the Initialiazation Vector (IV), i.e, the initial randomness fed in to the first block arrives mangled at receiver end? How will this affect the decryption? Will the receiver be ...
0
votes
1answer
87 views

Find first two blocks of plaintext given a final plaintext block, the IV and ciphertext for CBC?

I have the following: complete ciphertext; iv; last block of plaintext including the padding which is 04040404. The encryption was made using AES-CBC-256. I can ...
5
votes
1answer
609 views

How is it possible that these two encryption functions yield the same result?

I opened this post in stackoverflow some time ago where I explained a problem I had about not finding a way that would allow to successfully get the result of a string encrypted with a "aes-256-...
0
votes
2answers
101 views

Randomly initialised global counter used to encrypt the kth message with $\operatorname{IV} = \operatorname{IV} + k \hspace{5mm} mod \hspace{5mm} 2^n$ [duplicate]

The use of an increasing IV is not secure for a block cipher. That is, using a random IV for the first message then $\operatorname{IV} + 1$ for the second , $\operatorname{IV}+ 2$ for the 3rd etc. How ...
5
votes
2answers
1k views

During padding oracle attack (CBC), how is first byte of plaintext block is obtained?

Imagine conducting a padding oracle attack against CBC mode with 16-byte length blocks, and PKCS#5 used for padding. You start, as always, revealing the last byte of plaintext. Then you iteratively ...
2
votes
1answer
235 views

Quadruple DES vs AES-128 security

I came across this question regarding the security of Quadruple DES (hypothetically DES done four times) in CBC encryption mode vs security of AES-128 in CBC encryption mode. What parameters help to ...
32
votes
2answers
8k views

7zip : Why does encrypting the same file with AES-256 not give the same output?

Using 7-zip 19.00, on Windows 10 1909, build 18363.592, I encrypted a text file with the contents "hello there" using AES-256 and the password "123". I did this two times, the exact same procedure, ...
1
vote
2answers
55 views

Multiple IV CBC

CBC's encryption is not paralelizable but I could divide a 64 block message in 4 16 block parts and encrypt those 4 parts separatly in parallel using a diferent IV for each one. Is this unsecure ? Is ...
22
votes
3answers
35k views

How can Cipher Block Chaining (CBC) in SSL be attacked?

I am trying to understand how CBC-mode in SSL/TLS can be attacked. I have been looking around online but all examples and explanations are very hard to understand and follow. Can you give a simple ...
3
votes
1answer
195 views

AES-256, CBC, plaintext length is multiple of block size: Does PKCS #7 padding weaken the encryption?

Of course, padding is superfluous when AES with CBC is used if you know that the plaintext length is a multiple of the block size. But does the padding precipitate a weakness in the encryption? ...
2
votes
0answers
36 views

Looking for a way to enlarge a message so that any modification to the “enlarged” message makes recovering the original message impossible

Let's say we have a message m of small size. I am looking for a system $S$ so that $S(m)$ is arbitrarily large, we can easily compute the inverse $I(S(m)) = m$, and any modification to $S(m)$ makes it ...
2
votes
1answer
513 views

Alter plaintext through IV in block cipher AES in CBC mode

IV: 69bb375aa919c72aa561dd7b7ffacf66 Ciphertext: "c28ea025d10186510855d083747d6435c808d9857075abd9bfc54b094e60eaf3" Plaintext: "SEND ENCRYPTED DATA" I want to be able to change the resulting ...
2
votes
0answers
52 views

Is it okay to have no IV when using AES-CBC with unique keys, that are however derived from one shared key?

Given $\operatorname{AES-CBC}$ (128-bit), with $IV=0$ and unique encryption keys $$K_{Enc} = \operatorname{CMAC}(MK, \text{known_text})$$ where $MK$ is a shared symmetric 128-bit key and $\text{...
1
vote
1answer
132 views

Crypto system design : How to design Encryption for Zero width characters

Zero width character's can be used to hide text in plain sight.I am building a system where user's can provide their secret message , cover message and a password (key) which I would encrypt and give ...

1
2 3 4 5
9