Re: ecb works , but cfb and cbc don't ( php )


veg_all@xxxxxxxxx wrote:
Tom St Denis wrote:
Send the IV with the ciphertext.

Tom

i could be missing something, but this seems to defeat the purpose of
using this encryption module. ideally as long as I know the key, i
should be able to decrypt . if i need to know the IV as well, that
greatly increases the complexity of what I am trying to do. i have
encrypted files on servers everywhere. it would be very difficult to
manage attaching the IV with each one of them, no?

I don't see why that "defeats the purpose". Sending the IV doesn't
break the security of the algorithm [provided you keyed the thing
correctly and have addressed other threat vectors].

That'd be like saying you need an ELF header on executables would
"defeat the purpose" of a C compiler...

Tom

.

Relevant Pages