Skip to main content
malexmave's user avatar
malexmave's user avatar
malexmave's user avatar
malexmave
  • Member for 11 years, 11 months
  • Last seen this week
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
comment
Security of AES CTR with multiple messages containing the same known plain text
It's safe if you increment by the number of encrypted blocks. It's not safe if you always increment by one (which is what the tutorials said), as you would end up with the overlap you describe in your answer.
comment
Security of AES CTR with multiple messages containing the same known plain text
Fair enough, I didn't notice the ctr value vs. IV thing. I was not aware that the split counter was not standard, especially since several tutorials actually recommended using a counter as IV for AES-CTR to avoid IV reuse, which would be extremely unsafe without split counters...
1
2 3 4 5
7