Re: AES128-CBC Question

2007-04-19 Thread Nicolas Williams
On Fri, Apr 20, 2007 at 08:56:32AM +1200, Sidney Markowitz wrote: > Aram Perez wrote, On 19/4/07 6:29 PM: > > Is there any danger in using AES128-CBC with a fixed IV of all zeros? > > Here is some discussion about doing this, in the context of PGP doing > just that and why PGP inserts random chara

Re: AES128-CBC Question

2007-04-19 Thread Sidney Markowitz
Aram Perez wrote, On 19/4/07 6:29 PM: > Is there any danger in using AES128-CBC with a fixed IV of all zeros? Here is some discussion about doing this, in the context of PGP doing just that and why PGP inserts random characters at the begining of the plaintext. http://archive.cert.uni-stuttgart.

Re: AES128-CBC Question

2007-04-19 Thread Erik Tews
Am Mittwoch, den 18.04.2007, 23:29 -0700 schrieb Aram Perez: > Hi Folks, > > Is there any danger in using AES128-CBC with a fixed IV of all zeros? This is > being proposed for a standard "because that's how SD cards implemented it". That depends. What would be a valid attack on a SD-card? sign

Re: AES128-CBC Question

2007-04-19 Thread Victor Duchovni
On Wed, Apr 18, 2007 at 11:29:45PM -0700, Aram Perez wrote: > Is there any danger in using AES128-CBC with a fixed IV of all zeros? This is > being proposed for a standard "because that's how SD cards implemented it". > Is the same key ever used to encrypt multiple streams? This is a protocol