Questions tagged [ecb]

Electronic Code Book (ECB) is a mode of operation for a block cipher, with the characteristic that each possible block of plaintext has a defined corresponding ciphertext value and vice versa.

Filter by
Sorted by
Tagged with
0 votes
0 answers
50 views

AES-ECB attack encryption audio fie

I got two audio files one is encrypted and the other file is a part of the plaintext. I want to extract all the plaintext. I am using the AES-ECB mode, the size of the block is 128 bits and the start ...
mahouuuuuuu's user avatar
0 votes
0 answers
41 views

2 XORed AES-ECB ciphertexts, zero key and piece of plaintext

I have $C_1 \oplus C_2$ where $C_1$ = $AES128_k(P_1)$ and $C_2$ = $AES128_k(P_2)$. I know the k, it is 0 (i.e. 16 bytes of zeros). I know the piece of $P_1$ (7 ...
stefan09's user avatar
0 votes
1 answer
148 views

How does the Key Expansion Step Work for AES-192

I now understand the initial key from all the round keys will be the original 4x4 block for 128-bit keys, but I do not know how it would work for something else, like AES-256 or 192. Would it be that ...
Epicko Corporation's user avatar
3 votes
1 answer
274 views

Weird padding in Crypto.Util.Padding.pad() function in python

I'm trying to pad some plaintext to be a multiple of 16 bytes to use it as input in AES ECB block cipher. ...
Ahmed Mohamed's user avatar
2 votes
2 answers
294 views

Protecting against CPA for AES128/ECB by using padding

I was going to encrypt with AES, But I noticed ECB mode is not safe for CPA. So I thought about preventing CPA by padding input text to a multiple of 16 bytes. First, perform custom padding system: ...
kakacar's user avatar
  • 23
1 vote
0 answers
51 views

How can I encrypt with a matrix key using ECB mode? [closed]

Given this plaintext: 101010101010, and the block is 3, with a IV = 000 and the key as k = |1 2 3| |2 1 3| What are the required steps to get the same result like these in ECB mode: c1 = Ek(m1) = 011, ...
H Aßdøµ's user avatar
0 votes
1 answer
115 views

In AES-128-ECB, if byte 15 is over 128, the padding block changes value. What's the reason for this behavior?

For example, if we run this openssl command: openssl aes-128-ecb -a -in <(echo -n "AAAAAAAAAAAAAAAA") -K "deadbeefdeadbeefdeadbeefdeadbeef" ...
carleton's user avatar
  • 103
0 votes
0 answers
118 views

Attacking AES ECB

this is a school challenge. I have a cipher file which is the audio file, and no key of course, encrypted with AES ECB mode. The size is around 550 Kb. I know the key size used is 16 bytes, and I have ...
user1405583's user avatar
0 votes
1 answer
362 views

Why is ECB mode unsafe if the key is kept secret?

this is my first post so I apologise if the formatting of my post isn't perfect. I should start off by saying that this post is not for any malicious intent, rather for curiosity and understanding AES ...
Shafin Kamal's user avatar
0 votes
2 answers
145 views

How AES diffusion (permutation) does not impact ECB penguin pattern with in each block?

As per my understanding AES introduces diffusion in each block it encrypts even with ECB as mode of operation. If that is the case how the patterns are retained in each block? In this blog https://...
arjunballa's user avatar
2 votes
1 answer
115 views

Clarification on expected number of plaintext, ciphertext pairs needed to identify AES keys

I'm aware of the many questions on this topic, but I'm still not sure what went wrong with my reasoning here below. I'm assuming use of AES with key size $2^{256}$ and messages of size $2^{128}$, ...
Anon's user avatar
  • 383
1 vote
1 answer
144 views

Is it possible to use aes-ecb-256 decryption algorithm as customer key derivation function to generate the aes key?

I'm sorry if I'm going horribly wrong - I am new to this stuff. My question is: KDFC1,KDFC2,KDFC3 is defined by myself. Key1 is come from outside . Is it possible to use the aes-ecb-256 decryption ...
qibinLi's user avatar
  • 11
0 votes
1 answer
280 views

Decryption considering AES OFB and ECB

I have the following pseudo code considering a ransomware methodology to encrypt files: cFile = AESEncrypt(sessionKey, pFile, OFB, iv) keyBlob = AESEncrypt(masterKey, sessionKey, OFB, iv) ivBlob = ...
user101244's user avatar
0 votes
0 answers
153 views

what will be the impact of a 2-bit error in a ciphertext block for decryption if AES is used in ECB, CBC and CTR mode?

So I was reading about 1-bit error propagation for AES mode and how it propagates in various modes. I was wondering how error would propagate in ECB, CBC and CTR modes if it was a 2-bit or a 3-bit ...
user0623's user avatar
0 votes
1 answer
254 views

How strong would be create a password through AES ECB encryption?

Suppose that I want to use a "poor man" password management working as follows: 1. I choose and remember one single master password (for example "78HK+jm?329"); 2a. for any bank, ...
Fabius Wiesner's user avatar
0 votes
0 answers
39 views

recover plain text from cipher text in AES-128 ECB mode [duplicate]

I have a scenario where I do not have the key but I have plaintext 1, ciphertext 1, and ciphertext 2. Ciphertext 2 is built using the same key that was used to build ciphertext 1. Is there somehow a ...
Sarada's user avatar
  • 1
2 votes
1 answer
335 views

ECB... lacks diffusion(?)

I noticed that the wikipedia page for 'block cipher modes of encryption' states, "The disadvantage of this method is a lack of diffusion.", referring to ECB mode for block cipher encryption. ...
WrinkleMonopoly's user avatar
5 votes
1 answer
469 views

Does hashing an ECB encryption with a strong hash function produce a secure MAC?

Does applying a strong hash function like SHA-256 to the ECB-encryption of a message (using some secret key $K$) produce a secure mac? For example, given a message $m$, would a simple mac construction ...
ManRow's user avatar
  • 323
0 votes
0 answers
413 views

Prove that ECB-mode of a block cipher is not EAV-secure

I know that ECB-mode of block cipher is not recommended to use as it is not secure and is not even EAV-secure. However, I still don't get how to prove that it is not EAV-secure and what adversary is ...
Elan613's user avatar
1 vote
1 answer
4k views

Online AES Calculator

I am currently looking into how AES works and found a calculator online: http://testprotect.com/appendix/AEScalc I understand that the AES process has 10 rounds of calculations. Does this mean that ...
Jam's user avatar
  • 11
2 votes
1 answer
208 views

Which encryption technique should be adopted to keep the search functionalities?

I am in exactly the same situation as described in this post. I must be able to encrypt data from a client workstation then send it to an untrusted server (encrypted at rest), then decrypt it only on ...
Marc Alves's user avatar
0 votes
1 answer
4k views

AES-ECB Reverse attack CTF [closed]

We have a key representing an SHA-256 hash in HEX, and we have the key in AES-ECB. We also have a file with plaintext to cipher messages that were encrypted with our key. How could we find this key? <...
tanngo's user avatar
  • 17
0 votes
0 answers
313 views

Is ECB mode more suitable than CBC mode while encrypting a long bit string?

I know that ECB is less secure than CBC, but will it be suitable for encrypting a long bit string?
Sophie Elku's user avatar
1 vote
1 answer
531 views

Byte At A time ECB Attack

This is my first post on stack overflow/stack exchange so please excuse me if I asked the question in a bad way or the format is bad. I am currently working through the cryptopals challenges and I got ...
CryptoNoob's user avatar
1 vote
0 answers
50 views

Help needed for IBM KCV

I found old key letters used in EFT HSMs with TDES keys, parted in two halfs. The check value printed on this letters is called IBM CV and doubled IBM CV. My newer HSM does not support this kind of ...
user2032902's user avatar
3 votes
1 answer
258 views

Combining CTR and ECB modes to prevent attacks

In Reusing AES-CTR Keys and IVs for File Encryption, the OP was asking about a composite encryption scheme $$C_i = E_K\left(P_i \oplus E_K\left(IV + i\right)\right)$$ which is basically just a CTR ...
ManRow's user avatar
  • 323
0 votes
1 answer
88 views

AES 128-bit encryption - not getting expected results

I am trying to implement AES encryption on my own (128 bit key and ECB mode for now) and I can't seem to get expected results. From what I understand about AES algorithm is that it divides message in ...
Ach113's user avatar
  • 199
3 votes
1 answer
2k views

AES Padding (Nullbytes vs PKCS7)

I currently implement the AES(128,192,256)(ECB,CBC). Does the type of padding affect security? I just want to fill the blocks with null bytes.
TheDummy's user avatar
-1 votes
1 answer
419 views

How to find Key with DES, ECB hash and plaintext [closed]

I have two ciphertexts. Encryption algorithm: DES in ECB mode. Ciphertext: 72EE3532F904CE2AAA966C723C463F294CA8AB1C11E9E0B304BBB6A8E2BD1F34 Plaintext: DetectedSpambotsRemailedMalwares Ciphertext: ...
-2 votes
1 answer
235 views

What exactly is the problem with using electronic codebooks as a block cipher mode [duplicate]

I was wondering why it is a problem with using ECB as a block cipher mode
Juan 's user avatar
3 votes
1 answer
679 views

OpenSSL not producing messages of expected size

I have a 16 byte file, and after encrypting it, its size weirdly changes. ...
user76487's user avatar
0 votes
1 answer
541 views

How does AEAD guarantee authenticated encryption and plain AES does not?

This is a follow up to my earlier question. This is more out of curiosity in how AEAD (like CCM or GCM) works compared to encryption in other modes (like CBC or ECB). Suppose you have AES-256-CBC ...
Marek's user avatar
  • 123
6 votes
3 answers
2k views

How can frequency analysis be applied to modern ciphers?

I am building a computer program that deciphers Caesar, Vigenere and monoalphabetic substitution ciphers. All of those are susceptible to frequency analysis. However, it does not seem to be real-world ...
Marvin's user avatar
  • 165
0 votes
0 answers
549 views

How to prove that ECB mode is not CPA secure?

I am new to cryptography and I do not know how to prove the ECB mode is not chosen plaintext attack (CPA) secure.
Wayne Lee's user avatar
-1 votes
1 answer
1k views

What are the length of ciphertexts when 16 bytes and 18 bytes of plaintext using ECB?

What are the length of ciphertexts when 16 bytes and 18 bytes of plaintext are encrypted with AES using ECB mode?
Hasee Amarathunga's user avatar
0 votes
0 answers
101 views

Meet-in-the-middle attack (different block cipher modes)

Does a meet-in-the-middle attack on depend on the used modes for block ciphers? encryption: $C_i$ = $D_{K2}$($D_{K1}$($E_{K1}$($P_i$ $\oplus$ $C''_{i-1}$))) $\oplus$ $C'_{i-1}$ and $IV_1$ = $C''_0$ = ...
Dario Blair's user avatar
1 vote
0 answers
31 views

Meet-in-the-middle attack (on custom encryption scheme) [duplicate]

This is a question I had from an exercise session. Exercise: First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES ...
Dario Blair's user avatar
0 votes
1 answer
86 views

Symmetric encryption construction (meet-in-the-middle attack)

This is a question I had from an exercise session. First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES in CBC ...
Dario Blair's user avatar
2 votes
1 answer
271 views

LoRaWAN 1.0.2 Session Key Security

I am reading about LoRaWAN 1.0.2 specification. For the confidentiality and integrity of the comunication the protocol generate two session keys, the NwkSKey and the AppSKey (part 6.2.5 of the ...
Giuliano's user avatar
0 votes
1 answer
85 views

Can ECB be turned into a secure algorithm by adding obfuscation of the plaintext patterns?

Just to preface this I'm very new to cryptography. However, I've been reading that ECB should not be used under most circumstances due to its symmetry which allows attackers to gain information about ...
Radix's user avatar
  • 3
5 votes
2 answers
1k views

What's the reason for Monte Carlo tests for block ciphers?

NIST specifies that implementations were required to create Monte Carlo test vectors for ECB and CBC mode for the AES competition. What's the reason for these tests? The only thing I can think of is ...
Maarten Bodewes's user avatar
  • 91.8k
3 votes
3 answers
8k views

In which cases AES doesn't need IV?

I was trying to decrypt a text encrypted with AES and ECB mode. I did try several keys and IV. I solved it by ignoring IV. (The IV was given, but it was maybe a distraction) My question is in which ...
Philippe Delteil's user avatar
4 votes
1 answer
1k views

Performing a dictionary attack on RSA/ECB with no padding

I have the exponent $e=2^{16}+1$ and modulus $n$ (154 digit number) of an RSA public key along with the ciphertext (64 bytes) encrypted using the same key with RSA/ECB and no padding. I am required ...
2nce's user avatar
  • 55
3 votes
1 answer
437 views

Security of AES after key expansion 4-MB with ECB and CBC

My question is, how does the security depend or change if I encrypt with AES-128 in total 4-MB of Data? With Electronic Code Book Mode and Cipher Block Chaining Mode ? Does an adversary still ...
barium borat's user avatar
9 votes
3 answers
16k views

Is it possible to find the key for AES ECB if I have a list of plaintext and corresponding ciphertext?

Assume I have a list of plaintext text and its corresponding ciphertext which was created using a specific key with AES in ECB mode. Can I recover that key? If, how big does the list of plaintext ...
Richard Jones's user avatar
5 votes
1 answer
3k views

Encrypting AES in ECB mode

I'm fairly new to cryptography and am starting to understand this weird art of Mathematics and theory. One thing I am trying to understand and do is encrypting a plaintext into ciphertext using AES in ...
Benza Jackpuut's user avatar
3 votes
1 answer
647 views

Is AES ECB good enough for key spreading?

My apologies if I get my terminology wrong - I am new to this stuff. I am writing a routine (in c) to encrypt plaintext. I am using TinyAES to perform a CBC on the plaintext and sending a (pseudo)...
DrPhill's user avatar
  • 193
2 votes
3 answers
1k views

Variation on the ECB Penguin problem [closed]

So this is an age-old example of why encrypting images with ECB is a terrible idea, since the underlying pattern of the image remains the same. Referenced from: If you encrypt an image (AES), is it ...
R. Rengold's user avatar
1 vote
1 answer
439 views

With DES, is ECB encryption mode equivalent to CBC with null IV for short data blocks?

I got to this by experimentation, but can someone maybe provide an explanation for this?
bbozo's user avatar
  • 277
1 vote
1 answer
1k views

Which block cipher mode to use?

I am working on securing a chat application, and I am not sure about which block cipher mode I should use. I am aware that I should avoid ECB as it's insecure, but what about CBC? I have watched ...
Bana's user avatar
  • 11