Re: ecb works , but cfb and cbc don't ( php )



On 22 Jul 2006 17:57:47 -0700, veg_all@xxxxxxxxx wrote:


Tom St Denis wrote:
If you use ECB your product will invariably be insecure. So you might
as well not encrypt anyways.

can you elaborate on this? does it really make that much difference?
for that matter why should I encrypt anything, since any process has
flaws that can be exploited.
As you say below, no encryption is perfect but ECB is weaker than the
other modes. See the illustration in
http://en.wikipedia.org/wiki/Block_cipher_mode_of_operation for an
example. In ECB mode matching cyphertext blocks mean matching
plaintext blocks, and this gives away far too much information to an
attacker. Use CBC, CTR or whatever, anything but ECB.

rossum


my goal is to make it as difficult as reasonably possible to deter
anyone from hacking the data. nothing is perfect, and the best solution
is one that achieves the right balance between cost and results.



.



Relevant Pages

  • Re: AES Questions From Another Dummy.
    ... argument to the encrypt and decrypt functions. ... ECB is bad. ... agent in encryption to ensure identical texts don't encode to the same result) ... the ciphertext/plaintext to/from the users is an open question. ...
    (sci.crypt)
  • Re: Is triple DES in ECB mode secure?
    ... ]> the reason why they use ECB is to increase the speed of data processing. ... it is not easy to find files on your hard disk ... So, assuming that they encrypt file by file, ... Security is not a dongle. ...
    (sci.crypt)
  • Re: Fastcode AES B&V 0.1
    ... TAESContext; Encrypt: Boolean); ... procedure EncryptAES_TurboLock(const Context: TAESContext; var Block: ... These functions implements the core AES/Rijndael block cipher functionality. ... They define no modes such as ECB etc. ...
    (borland.public.delphi.language.basm)
  • Re: ECB+CTR Mode?
    ... both ECB and CTR modes. ... How would that compare with a Double-AES where you first encrypt a counter, ... Would you use two independent keys or two related keys or one key? ...
    (sci.crypt)
  • Re: Purpose and generation of initialization vector
    ... In ECB mode, you split your message into 16 byte chunks, ... account to another looked like this, ... amount to transfer ... blocks of 16 bytes, and encrypt each separately. ...
    (sci.crypt)

Quantcast