New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

# Questions tagged [ecb]

Electronic Code Book (ECB) is a mode of operation for a block cipher, with the characteristic that each possible block of plaintext has a defined corresponding ciphertext value and vice versa.

152 questions
Filter by
Sorted by
Tagged with
148 views

### Question about "ECB mode is OW-CPA secure if block cipher is PRP"

I'm reading "Cryptography Made Simple" Theorem 13.4, which states that "ECB mode is OW-CPA secure assuming the underlying block cipher ek acts like a pseudo-random permutation." I ...
1 vote
181 views

### Statistical differences between ciphertexts generated by AES in ECB vs CBC mode?

Given two ciphertexts encrypting the same (natural language) plaintext, where we know that one of the ciphertexts was encrypted with AES-CBC (and unknown IV) and one was encrypted with AES in EBC mode,...
• 113
1 vote
110 views

### AES-128 ECB Standard Confusion

Forgive my ignorance, but I've run into some confusion in an AES implementation I'm testing. To the best of my understanding, ECB provides no diffusion, the same plaintext with the same key will yield ...
276 views

### Encrypting the nonce in AES-CCM

I'm working on a network where nodes communicate using AES-CCM encryption, within a context of tight bandwidth limitations, making every bit count. The setup uses a nonce that combines a 16-bit node ...
82 views

### Is plaintext and ciphertext absolutely one-to-one in symmetric encryption algorithms? [closed]

Known conditions: The block size of this algorithm is 16 bytes. If there are multiple encryption modes, then it is limited to ECB mode. Always use only one immutable key. Since only ECB encryption ...
• 127
59 views

### AES-ECB attack encryption audio fie

I got two audio files one is encrypted and the other file is a part of the plaintext. I want to extract all the plaintext. I am using the AES-ECB mode, the size of the block is 128 bits and the start ...
54 views

### 2 XORed AES-ECB ciphertexts, zero key and piece of plaintext

I have $C_1 \oplus C_2$ where $C_1$ = $AES128_k(P_1)$ and $C_2$ = $AES128_k(P_2)$. I know the k, it is 0 (i.e. 16 bytes of zeros). I know the piece of $P_1$ (7 ...
1 vote
575 views

### How does the Key Expansion Step Work for AES-192

I now understand the initial key from all the round keys will be the original 4x4 block for 128-bit keys, but I do not know how it would work for something else, like AES-256 or 192. Would it be that ...
575 views

I'm trying to pad some plaintext to be a multiple of 16 bytes to use it as input in AES ECB block cipher. ...
420 views

### Protecting against CPA for AES128/ECB by using padding

I was going to encrypt with AES, But I noticed ECB mode is not safe for CPA. So I thought about preventing CPA by padding input text to a multiple of 16 bytes. First, perform custom padding system: ...
• 23
1 vote
60 views

### How can I encrypt with a matrix key using ECB mode? [closed]

Given this plaintext: 101010101010, and the block is 3, with a IV = 000 and the key as k = |1 2 3| |2 1 3| What are the required steps to get the same result like these in ECB mode: c1 = Ek(m1) = 011, ...
• 111
142 views

• 103
132 views

### Attacking AES ECB

this is a school challenge. I have a cipher file which is the audio file, and no key of course, encrypted with AES ECB mode. The size is around 550 Kb. I know the key size used is 16 bytes, and I have ...
1 vote
603 views

### Why is ECB mode unsafe if the key is kept secret?

this is my first post so I apologise if the formatting of my post isn't perfect. I should start off by saying that this post is not for any malicious intent, rather for curiosity and understanding AES ...
161 views

### How AES diffusion (permutation) does not impact ECB penguin pattern with in each block?

As per my understanding AES introduces diffusion in each block it encrypts even with ECB as mode of operation. If that is the case how the patterns are retained in each block? In this blog https://...
• 25
142 views

### Clarification on expected number of plaintext, ciphertext pairs needed to identify AES keys

I'm aware of the many questions on this topic, but I'm still not sure what went wrong with my reasoning here below. I'm assuming use of AES with key size $2^{256}$ and messages of size $2^{128}$, ...
• 403
1 vote
164 views

### Is it possible to use aes-ecb-256 decryption algorithm as customer key derivation function to generate the aes key?

I'm sorry if I'm going horribly wrong - I am new to this stuff. My question is： KDFC1,KDFC2,KDFC3 is defined by myself. Key1 is come from outside . Is it possible to use the aes-ecb-256 decryption ...
• 11
330 views

### Decryption considering AES OFB and ECB

I have the following pseudo code considering a ransomware methodology to encrypt files: cFile = AESEncrypt(sessionKey, pFile, OFB, iv) keyBlob = AESEncrypt(masterKey, sessionKey, OFB, iv) ivBlob = ...
161 views

### what will be the impact of a 2-bit error in a ciphertext block for decryption if AES is used in ECB, CBC and CTR mode?

So I was reading about 1-bit error propagation for AES mode and how it propagates in various modes. I was wondering how error would propagate in ECB, CBC and CTR modes if it was a 2-bit or a 3-bit ...
311 views

### How strong would be create a password through AES ECB encryption?

Suppose that I want to use a "poor man" password management working as follows: 1. I choose and remember one single master password (for example "78HK+jm?329"); 2a. for any bank, ...
40 views

### recover plain text from cipher text in AES-128 ECB mode [duplicate]

I have a scenario where I do not have the key but I have plaintext 1, ciphertext 1, and ciphertext 2. Ciphertext 2 is built using the same key that was used to build ciphertext 1. Is there somehow a ...
396 views

### ECB... lacks diffusion(?)

I noticed that the wikipedia page for 'block cipher modes of encryption' states, "The disadvantage of this method is a lack of diffusion.", referring to ECB mode for block cipher encryption. ...
516 views

### Does hashing an ECB encryption with a strong hash function produce a secure MAC?

Does applying a strong hash function like SHA-256 to the ECB-encryption of a message (using some secret key $K$) produce a secure mac? For example, given a message $m$, would a simple mac construction ...
• 343
475 views

### Prove that ECB-mode of a block cipher is not EAV-secure

I know that ECB-mode of block cipher is not recommended to use as it is not secure and is not even EAV-secure. However, I still don't get how to prove that it is not EAV-secure and what adversary is ...
1 vote
6k views

### Online AES Calculator

I am currently looking into how AES works and found a calculator online: http://testprotect.com/appendix/AEScalc I understand that the AES process has 10 rounds of calculations. Does this mean that ...
• 11
233 views

### Which encryption technique should be adopted to keep the search functionalities?

I am in exactly the same situation as described in this post. I must be able to encrypt data from a client workstation then send it to an untrusted server (encrypted at rest), then decrypt it only on ...
4k views

### AES-ECB Reverse attack CTF [closed]

We have a key representing an SHA-256 hash in HEX, and we have the key in AES-ECB. We also have a file with plaintext to cipher messages that were encrypted with our key. How could we find this key? <...
• 17
315 views

### Is ECB mode more suitable than CBC mode while encrypting a long bit string?

I know that ECB is less secure than CBC, but will it be suitable for encrypting a long bit string?
1 vote
632 views

### Byte At A time ECB Attack

This is my first post on stack overflow/stack exchange so please excuse me if I asked the question in a bad way or the format is bad. I am currently working through the cryptopals challenges and I got ...
1 vote
51 views

### Help needed for IBM KCV

I found old key letters used in EFT HSMs with TDES keys, parted in two halfs. The check value printed on this letters is called IBM CV and doubled IBM CV. My newer HSM does not support this kind of ...
275 views

### Combining CTR and ECB modes to prevent attacks

In Reusing AES-CTR Keys and IVs for File Encryption, the OP was asking about a composite encryption scheme $$C_i = E_K\left(P_i \oplus E_K\left(IV + i\right)\right)$$ which is basically just a CTR ...
• 343
103 views

### AES 128-bit encryption - not getting expected results

I am trying to implement AES encryption on my own (128 bit key and ECB mode for now) and I can't seem to get expected results. From what I understand about AES algorithm is that it divides message in ...
• 199
2k views

### AES Padding (Nullbytes vs PKCS7)

I currently implement the AES(128,192,256)(ECB,CBC). Does the type of padding affect security? I just want to fill the blocks with null bytes.
• 59
441 views

### How to find Key with DES, ECB hash and plaintext [closed]

I have two ciphertexts. Encryption algorithm: DES in ECB mode. Ciphertext: 72EE3532F904CE2AAA966C723C463F294CA8AB1C11E9E0B304BBB6A8E2BD1F34 Plaintext: DetectedSpambotsRemailedMalwares Ciphertext: ...
254 views

### What exactly is the problem with using electronic codebooks as a block cipher mode [duplicate]

I was wondering why it is a problem with using ECB as a block cipher mode
• 1
766 views

### OpenSSL not producing messages of expected size

I have a 16 byte file, and after encrypting it, its size weirdly changes. ...
598 views

### How does AEAD guarantee authenticated encryption and plain AES does not?

This is a follow up to my earlier question. This is more out of curiosity in how AEAD (like CCM or GCM) works compared to encryption in other modes (like CBC or ECB). Suppose you have AES-256-CBC ...
• 123
2k views

### How can frequency analysis be applied to modern ciphers?

I am building a computer program that deciphers Caesar, Vigenere and monoalphabetic substitution ciphers. All of those are susceptible to frequency analysis. However, it does not seem to be real-world ...
• 165
579 views

### How to prove that ECB mode is not CPA secure?

I am new to cryptography and I do not know how to prove the ECB mode is not chosen plaintext attack (CPA) secure.
1k views

### What are the length of ciphertexts when 16 bytes and 18 bytes of plaintext using ECB?

What are the length of ciphertexts when 16 bytes and 18 bytes of plaintext are encrypted with AES using ECB mode?
105 views

### Meet-in-the-middle attack (different block cipher modes)

Does a meet-in-the-middle attack on depend on the used modes for block ciphers? encryption: $C_i$ = $D_{K2}$($D_{K1}$($E_{K1}$($P_i$ $\oplus$ $C''_{i-1}$))) $\oplus$ $C'_{i-1}$ and $IV_1$ = $C''_0$ = ...
1 vote
31 views

### Meet-in-the-middle attack (on custom encryption scheme) [duplicate]

This is a question I had from an exercise session. Exercise: First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES ...
91 views

### Symmetric encryption construction (meet-in-the-middle attack)

This is a question I had from an exercise session. First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES in CBC ...
312 views

### LoRaWAN 1.0.2 Session Key Security

I am reading about LoRaWAN 1.0.2 specification. For the confidentiality and integrity of the comunication the protocol generate two session keys, the NwkSKey and the AppSKey (part 6.2.5 of the ...
• 23
85 views

### Can ECB be turned into a secure algorithm by adding obfuscation of the plaintext patterns?

Just to preface this I'm very new to cryptography. However, I've been reading that ECB should not be used under most circumstances due to its symmetry which allows attackers to gain information about ...
1k views

### What's the reason for Monte Carlo tests for block ciphers?

NIST specifies that implementations were required to create Monte Carlo test vectors for ECB and CBC mode for the AES competition. What's the reason for these tests? The only thing I can think of is ...
• 93k
9k views

### In which cases AES doesn't need IV?

I was trying to decrypt a text encrypted with AES and ECB mode. I did try several keys and IV. I solved it by ignoring IV. (The IV was given, but it was maybe a distraction) My question is in which ...
1k views

### Performing a dictionary attack on RSA/ECB with no padding

I have the exponent $e=2^{16}+1$ and modulus $n$ (154 digit number) of an RSA public key along with the ciphertext (64 bytes) encrypted using the same key with RSA/ECB and no padding. I am required ...
• 55
441 views

### Security of AES after key expansion 4-MB with ECB and CBC

My question is, how does the security depend or change if I encrypt with AES-128 in total 4-MB of Data? With Electronic Code Book Mode and Cipher Block Chaining Mode ? Does an adversary still ...
18k views

### Is it possible to find the key for AES ECB if I have a list of plaintext and corresponding ciphertext?

Assume I have a list of plaintext text and its corresponding ciphertext which was created using a specific key with AES in ECB mode. Can I recover that key? If, how big does the list of plaintext ...