Re: AES-CTR Re-encrypting the same text with different IV.

From: Tom St Denis (tomstdenis_at_gmail.com)
Date: 05/20/05 

Date: 20 May 2005 12:10:35 -0700

Skybuck Flying wrote:
> Like so:
>
> C0 = AES(Key,IV+0) xor P0
> C1 = AES(Key,IV+1) xor P0
> C2 = AES(Key,IV+2) xor P0
> Cn = AES(Key,IV+n) xor P0

That's called a known plaintext attack. And CTR reduces to the
security of the cipher under known plaintext attacks.

Tom

Relevant Pages

  • Re: computer instruction (population count)
    ... "population count" instruction, that is, an instruction which will ... computing it may reperesent a sizable portion ... and it'll break a bad cipher. ... chosen plaintext attack or any other plaintext attack. ...
    (sci.crypt)
  • Re: Algorithm Modes
    ... Provably as secure [in a privacy context] as the underlying block ... |>cipher against a known plaintext attack. ... CTR mode is secure for privacy]. ...
    (sci.crypt)
  • Re: Compression and crypto
    ... if you want security that it might be vulnerabe to a plaintext attack ... I know, I know, with compression we usually put a non negligeable ... only cryptosystems known to not allow plaintext attack, ...
    (sci.crypt)
  • Re: Basic question
    ... jwes wrote: ... > Does a successful attack require being able to recognize the plaintext ... > could you know that you had broken the cipher? ... plaintext attack, ...
    (sci.crypt)
Quantcast