Re: Append IV to ciphertext?

From: David Wagner (daw_at_taverner.cs.berkeley.edu)
Date: 07/29/04 

Date: Thu, 29 Jul 2004 15:38:09 +0000 (UTC)

Michael Amling wrote:
> Someone here can tell you whether a CBC IV needs to be random or
>whether it can just be a sequence number.

Yup, the IV for CBC should be random. Using a sequence number can cause
occasional leaks of plaintext information, depending on the distribution
and formatting of plaintexts.