Skip to main content
3 of 3
Made minor readability fixes. Also added "chosen-plaintext-attack" tag.

Why is CBC with predictable IV considered insecure against chosen-plaintext attack?

I just learned that using CBC encryption with an IV which is predictable is not secure.

From what I understand, using certain plain texts, and then guessing the IV that it uses, the attacker can verify if the IV he guessed was right. How does this qualify as an attack?

asudhak
  • 491
  • 1
  • 4
  • 5