From owner-freebsd-security Thu May 4 13:15:33 2000 Delivered-To: freebsd-security@freebsd.org Received: from grimreaper.grondar.za (grimreaper.grondar.za [196.7.18.138]) by hub.freebsd.org (Postfix) with ESMTP id 33DE037C1E1 for ; Thu, 4 May 2000 13:15:27 -0700 (PDT) (envelope-from mark@grondar.za) Received: from grimreaper.grondar.za (localhost [127.0.0.1]) by grimreaper.grondar.za (8.9.3/8.9.3) with ESMTP id WAA07617; Thu, 4 May 2000 22:15:33 +0200 (SAST) (envelope-from mark@grimreaper.grondar.za) Message-Id: <200005042015.WAA07617@grimreaper.grondar.za> To: "Andrew J. Korty" Cc: security@FreeBSD.ORG Subject: Re: Cryptographic dump(8) References: In-Reply-To: ; from "Andrew J. Korty" "Thu, 04 May 2000 13:20:12 EST." Date: Thu, 04 May 2000 22:15:32 +0200 From: Mark Murray Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > I was under the impression that the CBC mode would also propagate this > entry throughout the block. Must I use one of the feedback modes? Yes. I have no hard references in front of me, but I'll put ${bodypart} on a block that CBC is 8-bytes-at-a-time-with-same-key-each-time. IE not good enough to stave off known plaintext attacks. CBC is what you'd use if the entire plaintext is of unpredictable structure. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message