> CBC IV does not in general have to be unpredictable. Yes, it does. If not, you... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

ctz on Jan 6, 2015 | parent | context | favorite | on: Secure Secure Shell

> CBC IV does not in general have to be unpredictable.

Yes, it does. If not, you lose IND-CPA. That is, if it is predictable the attacker gets to test guesses for the plaintext of other blocks.

Read Duong and Rizzo, "Here come the XOR Ninjas", 2011. http://www.hpcc.ecs.soton.ac.uk/~dan/talks/bullrun/Beast.pdf

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact