For AES CBC encryption, whats the importance of the IV?

前端 未结 4 2115
有刺的猬
有刺的猬 2020-12-17 19:33

What is the security threat of always using all zeroes for the IV? If it allows the encrypted text to be deciphered, how could an attacker do that?

UPDATE: So then,

4条回答
  •  抹茶落季
    2020-12-17 19:57

    If the IV is always zero, all messages with common text at the start (for example, emails with the same first two or three cipher blocks for the 'From ' or 'From: ' information) will be encrypted the same. This gives the attacker leverage over your key. That is unconditionally bad. As long as you use a reasonably random IV, the attacker loses that leverage. Don't risk it.

提交回复
热议问题