Re: 16-bit Block Cipher



How is the idea of keeping the query IDs unpredictable consistent
with using the entire codebook? Anyone whose seen the first 2**15-8
generated query IDs with a given mode bit value will have an excellent
chance of predicting the remaining 8.

Well, now that you point it out, it isn't. Oops. Sorry for
suggesting something with this problem.

If the keys were refreshed and
mode bit flipped after 2**14 IDs, then the probability of guessing the
next ID is never more than 2**-14.

I think you mean the mode bit flipped after every 2^14 IDs and keys
refreshed after every 2^15 IDs. That's a good suggestion; a better
solution than what I proposed. Thanks!
.



Relevant Pages

  • Re: what if the message-ID generator generates a dirty word?
    ... considering that the flaw is imaginary in practice? ... so there was only about 1/8th of a chance you'd ... Any site that generates enough IDs is likely to eventually create ... Try searching for 'sexy' in your store of IDs, ...
    (comp.security.misc)
  • Re: Math.random() algorithm
    ... elements or so would hardly fit in a browser. ... chance of duplicates with only a few hundred elements. ... The time spent generating ids seems ... "Quand on dit c'est un Johannes, cela vaut autant que ce que maintenant ...
    (comp.lang.javascript)
  • Re: update only file system
    ... but it is listening just in a different way. ... A bug in the log daemon is most likely still exploitable. ... kernel's paths) you've more chance of adding a bug. ... In the IDS case, you may also be processing the data in a way that's ...
    (comp.os.linux.security)
  • Re: ssh and ids
    ... One chance to trip the IDS ... Another chance to trip the IDS (or host integrity checking) ...
    (Focus-IDS)
  • Re: flagship sunk
    ... "2006 will be the last chance to re-vitalize the Informix platform" ... So if IBM really wants to re-vitalize IDS, ... Then there would be a real chance not to lose IDS customers to Oracle ...
    (comp.databases.informix)