Questions tagged [cbc]

Cipher Block Chaining (CBC) is a block cipher mode of operation.

Filter by
Sorted by
Tagged with
2
votes
2answers
77 views

What algorithm does 1password use for encryption, AES-GCM-256 or AES-CBC-256?

I would like to know what encryption does 1password use. From this 1password-security page, it says Your 1Password data is kept safe by AES-GCM-256 authenticated encryption. The data you entrust to ...
0
votes
0answers
58 views

CBC-MAC vulnerability with reused keys

I'm looking at the CBC-MAC vulnerabilities that arise when CBC-MAC is used incorrectly, specifically when the keys for encryption and authentication are reused. The source I'm relying on is the ...
2
votes
1answer
2k views

Which one to use AES : GCM vs CBC

I am planning to encrypt database fields using AES encryption. Now, this encrypted data will not transfer over the internet and will reside in our own datacenter only. From what I read, GCM mode ...
3
votes
2answers
2k views

Are ECB and CBC modes of operation generally insecure?

In some Java code that I'm reading, I stumbled over the following encryption algorithms passed to the Cipher.getInstance(...) method: AES/CBC/PKCS5Padding DESede/ECB/PKCS5Padding RSA/ECB/PKCS1Padding ...
1
vote
0answers
51 views

How does one implement chunked CBC encryption safely; is this implementation flawed?

UPDATE: Upon further research, I discovered a library that appears to meet my needs, especially with regard to the chunked aspect. Rather than "roll my own", I would be better served to use this well-...
1
vote
1answer
409 views

What if the attacker tamper the IV used in the block cipher CBC mode?

I am a newbie to block cipher and when learning the CBC mode, I start to understand that an IV is being used in this mode and also will be transferred to the message receiver. So here is my question,...
57
votes
2answers
21k views

Why does SSL Labs now consider CBC suites weak?

Why does SSL labs now mark CBC 256 suites as weak, although equivalent GCM and ChaCha20 are considered strong? Until a few months ago, it was unmarked in reports (neither explicitly as weak or strong),...
1
vote
1answer
2k views

Decrypting AES-128-CBC leads to first block being correct, the rest corrupt

I'm currently investigating a piece of software which encrypts it's files with AES-128-CBC. From disassembly it is truly known that the algorithm used is correct (log messages plus calls to the ...
0
votes
1answer
395 views

Why is authentication impossible with CBC mode?

Suppose I have a protocol where fixed-length messages (1280 bytes, no padding) are encrypted with AES in CBC mode. I want to put some data in the message body to verify that the message is authentic. ...
16
votes
2answers
3k views

What is the impact of the reported weak IV in 7 Zip?

It has been reported that 7 Zip generates IVs in a weak manner. What is the actual impact of this? I'm asking about historical Zip files that I've sent. I've no plans to use 7 Zip going forward until ...