Re: cbc mode - why IV and not random first block



This a joke, right? Your "completely random first block" is the
definition of what an iv is (in cbc mode).

No joke.
The IV is usually not added to the encrypted text as first block, but
only used for the encryption.
To decrypt, the first block of the encrypted plaintext is decrypted and
only then XORed with the IV. The IV is not content of the encrypted
text.

My suggestion was to add 256 bits of random data in front of the
plaintext, encrypt all, and after cbc-decryption, to remove the first
256 bits from the front of the decrypted text.

This is a small difference, and I wonder if there are any flaws.

Thanks,
Jens

.



Relevant Pages

  • Re: simplified des modes of operation
    ... encryption cycle, and the first block of data is xored with IV vector ... ciphertext = encrypt; ...
    (sci.crypt)
  • Re: C# Rijndael encryption. When decrypting I get junk data in the first block
    ... I use Rijndael encryption and here are the most important properties. ... program again to decrypt the first block is junk... ... first block corrupted it manages to decrypt the rest of the file... ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: TrueCrypt 4.0 Out
    ... the first block of the ciphertext ... There's a difference between disk encryption and network ... CBC mode exploits. ...
    (sci.crypt)
  • Re: cbc mode - why IV and not random first block
    ... only used for the encryption. ... To decrypt, the first block of the encrypted plaintext is decrypted and ... with the small caveat that the common method is marginally faster. ...
    (sci.crypt)
  • Hidden Nonce Mode
    ... I also note that there are concerns with nonce modes as well. ... If counter-mode encryption is secure, ... and use an Outerbridge construction to encrypt it. ... since the first block of the counter is always zero for the first ...
    (sci.crypt)