Questions tagged [cbc]
Cipher block chaining (CBC) is a method for encrypting large amounts of data with a block cipher that can only encrypt fixed length plaintexts. When used with an unpredictable initialization vector (IV), it is secure against chosen plaintext attacks (CPA-secure).
488
questions
3
votes
1
answer
156
views
Why does CBC-MAC(M) = CFB-MAC(M)?
I don't understand why $\text{CBC-MAC}(M) = \text{CFB-MAC}(M)$. Has it something to do with $\text{CBC-MAC}(M) = C_L$ and $\text{CFB-MAC}(M) = E_K(C'_{L-1})$?
- 31
1
vote
1
answer
926
views
AES-CBC Hash Function Collision Resistance
I am using AES-CBC as a hash function which is encrypting a block of length n. The blocks, m = (m1, m2, ..., mn). The IV is one block long and the encryption key is length 128, 192 or 256 bits.
Will I ...
- 13
0
votes
1
answer
343
views
Why are des-cbc-hmac and rc4-hmac-exp considered weak in kerberos?
Kerberos uses des-cbc-hmac (mac and encrypt) and rc4-hmac-exp based on md5 (mac and encrypt I think) in their encryptions.
Those encryptions are considered as weak and should not be used. Why are they ...
- 175
0
votes
2
answers
178
views
Grover algorithm for AES in CBC mode
Hello,
I was wondering whether it is theoretically possible to use Grover alrogithm to break AES in CBC mode. Assume that I have ~1000 plaintext/ciphertext pairs and key length is 128 bits. I thought ...
- 15
1
vote
2
answers
436
views
Integrity while using CBC
We have a body we want to encrypt using CBC, and we add to that body one block of known text to both sides.
newBody = body + knownBlock
now we encrypt newBody using a key known to both sides, then we ...
- 97
1
vote
1
answer
446
views
Safety of AES-256/CBC/PKCS#7 + randomization and reusage of IV
As a start, I'm by any means no expert or anything near that in cryptography. I know the very basic about this, enough to more or less choose a method to implement and then read about it so I knew ...
- 113
3
votes
2
answers
256
views
CBC mode with predictable IV ok if key is only used once?
Someone told me recently that using CBC mode with a predictable (e.g. all 0) IV is reasonably secure if a key is only used for encryption one time. I've gone through a couple of examples of chosen ...
- 2,023
1
vote
1
answer
81
views
Why is Masking used in CMAC? [closed]
I am working on masking in CMAC.
If masking is not used, then what will be the behavior of CMAC?
- 11
1
vote
0
answers
64
views
Where exactly do you add the zeroes to a URL in a padding oracle attack? Also, how would you decrypt a file this way?
I have been studying various crypto attacks, and one of the attacks that I have recently studied was the padding oracle attack. Now, I mostly understand it, but there is one aspect of the padding ...
- 13
2
votes
2
answers
2k
views
Does reusing IV in AES-CBC weaken it?
Rsynccrypto allegedly uses AES-CBC with a twist: If the last few bytes of plaintext meet a condition*, then stop, pad the current block and start encrypting new block from the current position in file ...
1
vote
0
answers
72
views
CTR mode calculate messages before new key is required
I am studying a cryptography video on Coursera here titled: Modes of Operation: Many Time Key (CTR).
I have just two simple questions:
At around 4:30 in the video they show 2^48 without saying where ...
- 145
1
vote
0
answers
126
views
Formal security arguments for 3 round feistal network using PRF
There is a proof sketch in Introduction to modern cryptography that a three-round feistel network using pseudorandom round functions is a secure pseudorandom permutation PRP Πk against probabilistic ...
- 11
1
vote
1
answer
4k
views
Online AES Calculator
I am currently looking into how AES works and found a calculator online: http://testprotect.com/appendix/AEScalc
I understand that the AES process has 10 rounds of calculations. Does this mean that ...
- 11
0
votes
1
answer
75
views
Does XORing a random block into a layer of CBC encrypted message add some bit strenght?
Let's suppose I encrypt a message with a block cipher in CBC mode, keep the key and IV secret and XOR a random block of data in each encrypted CBC block, being the XORed block the same for each CBC ...
- 877
11
votes
2
answers
2k
views
Random data CBC padding scheme?
When using AES in CBC mode, padding is required when the last plaintext block has not the length required by the cipher. Let's say $k$ mode bytes would be required to fill the block. My idea was to ...
- 233
1
vote
1
answer
331
views
Finding IV for forgery of AES CBC-MAC with non-fixed IV
As CBC mode might do several rounds, how it could be possible to find another IV for forgery attack?
This is an example from my course:
Assume you receive a pair with the plaintext $P_1$ and its MAC ...
- 13
0
votes
1
answer
424
views
AES-128 CBC encryption : ciphertext size seems too large
I am trying to encrypt messages with the AES symmetric algorithm using C language.
I am using a key, an Initialization Vector (IV) and a plaintext, all with a length of 16 bytes.
I expected as output ...
- 1
2
votes
1
answer
616
views
Comparing the security when using fixed IV for CBC and CTR
Assuming that I'm using fixed IV's for CBC mode and CTR mode. I know that in CBC, the blocks depend on the previous ones and on CTR they are all independent. Yet with the same key and fixed IV, the ...
1
vote
0
answers
124
views
Proving Security of a Tweakable Block Cipher in CBC Mode (Threefish)
I want to prove the security of a Tweakable Block Cipher in CBC Mode
How does one prove the security of a Tweakable block cipher (ie Threefish) in CBC mode with a random IV and a constant (public) ...
- 31
0
votes
2
answers
6k
views
AES/GCM/PKCS5Padding giving issues while AES/CBC/PKCS5Padding works fine for my use case
I have a requirement to read-encypt-save plus its reverse i.e. read-decypt-save files through chunk/block mechanism (single operation not feasible because of huge(GBs) file sizes).
So essentially the ...
- 101
2
votes
1
answer
321
views
How to create the ciphertext that generates a desired plaintext in CBC (previous cipher- and plaintext are known)
I'm struggling with understanding this part of the literature:
It can be assumed that the entire ciphertext AND plaintext is known.
Considering the encryption method is $C_i = enc_k ( P_i \oplus C_{...
- 23
1
vote
1
answer
168
views
Exploitability of AES in CBC Mode For Recovery of Plain Text
I'm aware of existing literature that shows in a comprehensive manner just how simple it is to tweak the ciphertext of AES-CBC such that the decrypted message ends up being entirely different than ...
- 135
4
votes
2
answers
287
views
Substitution ciphers amended with cipher block chaining: susceptible to frequency analysis?
I have been studying ways to amend a simple substitution cipher, and one of the toy suggestions was to use CBC in the following way:
identify each letter with a number from $0\ldots 25$
start with a ...
- 73
1
vote
1
answer
3k
views
Finding the IV of AES CBC (CTF)
We have a python program that encrypts/decrypts plaintext given in hex to a cipher using AES CBC. We know that the IV is the same and is not going to change (it is stored in a file). How can we ...
- 17
1
vote
1
answer
253
views
Is it safe to reuse an IV 100 times to a single key with AES CBC? [duplicate]
I have a unique 6 digit number that I am generating a IV from. I am trying to make it as unique as possible. From my programming, I am able to get it down to only have 100 duplicate IVs per unique 6 ...
- 13
2
votes
1
answer
208
views
Which encryption technique should be adopted to keep the search functionalities?
I am in exactly the same situation as described in this post. I must be able to encrypt data from a client workstation then send it to an untrusted server (encrypted at rest), then decrypt it only on ...
- 21
3
votes
2
answers
1k
views
AES-CBC decrypts to wrong output?
Someone I know showed this to me, and I can't put a finger to why it's happening. Am I missing something?
They encrypt the text, and the output is really guessable. $u\to t$, $i\to h$ (it's one letter ...
- 43
2
votes
0
answers
388
views
An exercise to show that CBC Chain is insecure
The CBC-Chain mode of operation is a CBC variant in which the IV that is used for
the very first message to be encrypted is randomly selected, whereas the IV used for
each subsequent encrypted message ...
- 41
0
votes
0
answers
319
views
Is it more secure to use Diffie-Hellman to generate a symmetric AES key for use with CBC, rather than use CBC directly atop RSA encryption?
Short question:
If we assume a one-session use public RSA keypair on both sides, and if we assume that the input stream will be split into blocks -- with CBC encryption -- is there any security ...
- 113
0
votes
0
answers
313
views
Is ECB mode more suitable than CBC mode while encrypting a long bit string?
I know that ECB is less secure than CBC, but will it be suitable for encrypting a long bit string?
1
vote
0
answers
29
views
Is it necessary to use an IV in CBC mode when just encrypting one file? [duplicate]
As far as I know, CBC mode, even with a null IV, will encrypt identical plaintext blocks to unique ciphertext blocks within a single file. The purpose of an IV is to obscure the similarities between ...
- 11
1
vote
2
answers
480
views
Help me understand how to do a crypto assignment about AES/CBC
I'm doing the Coursera cryptography I course from Dan Boneh. I am attempting to do week 2's programming assignment, but I think I am having some sort of misunderstanding of either the theory, the ...
- 113
2
votes
2
answers
183
views
Does it increase security if the CBC chunks of a AES-256 encrypted bytestream are uploaded to different clouds?
I want to backup my data according to the 3-2-1 rule. I am already back up to 2 different drives (2 different systems) at home. In addition, I would like to use cloud storage (Google, Amazon, etc.). ...
- 21
0
votes
0
answers
18
views
Does it increase security if the CBC chunks of a AES-256 encrypted bytestream are uploaded to different clouds? [duplicate]
I want to backup my data according to the 3-2-1 rule. I already backup to 2 different drives (2 different systems) at home. In addition i would like to use cloud storage (Google, Amazon etc.). ...
Hans Peter
1
vote
1
answer
174
views
CBC mode works well for input greater than "b" bits. What is that "b" bits?
This post on geeksforgeeks.org about block cipher modes of operation, says that one of the advantages of the CBC is that it works well for input greater than b bits. I also saw that in the book "...
- 165
0
votes
0
answers
431
views
Known plaintext attack on AES with CBC
Assume I have a plaintext and a ciphertext, encrypted using some key and AES with CBC mode. I don't have a service, that I can send something to, so I can't use the Padding Oracle attack. Are there ...
- 1
2
votes
2
answers
474
views
Padding Oracle Attack CBC Mode: If the set of characters of plaintext is known, then can you speed up the process
Consider AES-256, 128-bit blocks, and PKCS#5 Padding.
During a Padding Oracle Attack, a manipulated byte of cipher text is sent to the oracle and we eventually hope to find out what that respective ...
- 141
3
votes
1
answer
343
views
Block Cipher Mode of Operations
I am studying for a test and I don't seem to understand the Block Cipher and its different modes of operations especially when it comes to encrypting and decryption. Could anyone please help solve ...
- 31
2
votes
0
answers
216
views
Decrypting first byte of plain-text for AES CBC Padding Oracle Attack
I'm working on padding oracle attack and I have a 16 byte cipher on which I need to perform the attack. I've been able to successfully decrypt all the bytes of the plain-text except first byte and I'm ...
- 321
1
vote
1
answer
183
views
Is it safe to use the CBC-MAC as a Initial Vector and Key Check Value in deterministic encryption?
I want to deterministically encrypt a short message <50 bytes with AES-128 CBC. I also want to be able to detect if the correct key is being used.
Ciphertext and IV integrity will be guaranteed by ...
- 55
1
vote
0
answers
279
views
CBC-MAC variable-length weakness with MAC size greater than the encryption block size
The title mostly explains it;
CBC-MAC variable-length weakness with MAC size greater than the encryption block size
I've seen that by having the pairs $(M,T_m)$ and $(N,T_n)$, we can generate a ...
- 11
0
votes
1
answer
978
views
How to alter text that was encrypted with AES CBC using PKCSPadding7
Assuming, I had a ciphertext along with its decrypted plain text result but not the IV or the Secret Key. (keep in mind that the text was encrypted with AES/CBC/PKCSPadding7).
How would I go about ...
Hersky
3
votes
1
answer
2k
views
AES Padding (Nullbytes vs PKCS7)
I currently implement the AES(128,192,256)(ECB,CBC). Does the type of padding affect security?
I just want to fill the blocks with null bytes.
- 59
0
votes
0
answers
150
views
Can I and How Decrypt this Online
Although I had a security course in school a long time ago, I am effectively new to cryptography.
I have an encrypted text, the encryption key of 44 characters, the encryption method, (Fernet, which ...
- 101
0
votes
0
answers
145
views
Decrypting an AES string
I'm dealing with a website that loads a javascript file which eventually sets an AES hash/value (whatever it's called) as a cookie. The file is heavily obfuscated making it hard to understand certain ...
- 1
0
votes
1
answer
320
views
In CBC mode of encryption, what happen if the IV is changed when it arrives at the receiver end? [duplicate]
What will happen if the Initialiazation Vector (IV), i.e, the initial randomness fed in to
the first block arrives mangled at receiver end? How will this affect the decryption? Will the receiver be
...
- 1
0
votes
1
answer
239
views
Find first two blocks of plaintext given a final plaintext block, the IV and ciphertext for CBC?
I have the following:
complete ciphertext;
iv;
last block of plaintext including the padding which is 04040404.
The encryption was made using AES-CBC-256. I can ...
- 3
5
votes
1
answer
959
views
How is it possible that these two encryption functions yield the same result?
I opened this post in stackoverflow some time ago where I explained a problem I had about not finding a way that would allow to successfully get the result of a string encrypted with a "aes-256-...
- 153
2
votes
1
answer
590
views
Quadruple DES vs AES-128 security
I came across this question regarding the security of Quadruple DES (hypothetically DES done four times) in CBC encryption mode vs security of AES-128 in CBC encryption mode.
What parameters help to ...
- 153
1
vote
2
answers
111
views
Multiple IV CBC
CBC's encryption is not paralelizable but I could divide a 64 block message in 4 16 block parts and encrypt those 4 parts separatly in parallel using a diferent IV for each one. Is this unsecure ? Is ...
- 373