Is it normal that when I use Double DES secret key to encrypt a string in DES3 CBC mode then I always get the same cipher text? For testing I'm using IVC=0.
-
1Are you using a standard .NET library, or something you picked up online? Got a code snippet?– MToeckerCommented Sep 15, 2011 at 21:03
Add a comment
|
2 Answers
If you encrypt the same thing it is normal, if you encrypt something different it is not normal. In that case you have probably an error in your implementation.
A common error is to translate the encrypted result to string for transport, all non-readable bytes are then changed to "?" by .net.
-
Yes, im encrypting exactly the same thing. I,m not translating the result to string, im just comparing the bytes what il get back from the Encrypt function.– ddsdCommented Sep 16, 2011 at 6:11
-
That's why a good encryption algorithms like AES takes an IV (initialization vector). The IV has many similarities with the salt when hashing passwords. It makes sure that even though you encrypt the same text, the cipher text becomes different (as long as you use a different IV of course)– ErlendCommented Sep 17, 2011 at 11:33
-
IV has nothing to do with DES nor AES. IV's are used in some modes of blockciphers (CBC for example).– HenriCommented Sep 19, 2011 at 18:49
-
Thanks, i had an error in my solution (The IV wasn't passed to the mechanism properly)– ddsdCommented Sep 20, 2011 at 6:54
Yes, if the IV is the same and the message is the same, then you should expect the ciphertext to be the same.
I hope you are aware that using a fixed IV (like IV=0) is insecure. (The reference to double DES is also puzzling. Double DES is insecure. Of course, you also mention DES3, so if you meant triple DES, then this comment can be ignored.) In addition, if you are using encryption without authentication, that is also likely to be insecure.
Instead of putting together your own encryption, I suggest you use a standard scheme, such as the OpenPGP data encryption format (for data at rest) or SSL/TLS (for communication channels).
