Skip to main content
6 votes

Omit IV for AES128-CBC when requiring to always get the same ciphertext encrypting random IDs

This approach looks very awkward. The fact that you need strange workarounds like this “halfway-CBC” mode to make it work shows that there's definitely something wrong. The solution to only allowing ...
Ja1024's user avatar
  • 9,235
4 votes

Omit IV for AES128-CBC when requiring to always get the same ciphertext encrypting random IDs

Yes, you can set the IV to a fixed value. Of course, using CBC does not provide many advantages, and it has some disadvantages. CBC is vulnerable to bit flip attacks, where flipping a bit in the ...
Sjoerd's user avatar
  • 30.9k

Only top scored, non community-wiki answers of a minimum length are eligible