> Forgive this question, but what is the difference between RANDOM_IV> and
> UNPREDICTABLE_RANDOM_IV.The second one is an oxymoron. If you check
> cryptographi literature, you'd find that initially the only requirement for
> IV is "non-repeating" (so it was not uncommon to use a counter as IV). Later
> on, people caught up on very weird attacks made possible by certain protocols
> and utilizing the knowledge of the coming IV for the next packet. Then
> cryptographers suggested that to deal with those protocols and attacks, IV
> must be not only non-repeating but also non-predictable. Then the Internet
> community (engineers, not cryptographers) came up with the requirement for IV
> to be random.Hope this clarifies it a little.> In my naiveness, if an IV is >
> random, it> would also be unpredictable. Because there is a distinction, my
> logic> is obviously flawed. I just don't see where (am I missing the forest>
> when looking into the trees?).> > Jeff> >
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the "Crypto++ Users"
Google Group.
To unsubscribe, send an email to [EMAIL PROTECTED]
More information about Crypto++ and this group is available at
http://www.cryptopp.com.
-~----------~----~----~----~------~----~------~--~---