Skip site navigation (1)Skip section navigation (2)
Date:      04 May 2000 23:18:10 -0400
From:      stanislav shalunov <shalunov@att.com>
To:        Mark Murray <mark@grondar.za>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Cryptographic dump(8)
Message-ID:  <877ld9vg5p.fsf@sharik.worldnet.att.net>
In-Reply-To: Mark Murray's message of "Thu, 04 May 2000 22:15:32 %2B0200"
References:  <Pine.BSF.4.21.0005041318270.26492-100000@verbal.uits.iupui.edu> <200005042015.WAA07617@grimreaper.grondar.za>

next in thread | previous in thread | raw e-mail | index | archive | help
Mark Murray <mark@grondar.za> writes:

> Yes. I have no hard references in front of me, but I'll put ${bodypart}
> on a block that CBC is 8-bytes-at-a-time-with-same-key-each-time. IE not
> good enough to stave off known plaintext attacks. CBC is what you'd use
> if the entire plaintext is of unpredictable structure.

You must be confusing CBC with ECB.

CBC is the correct chaining mode to use for this application.
Feedback modes would do more harm than good.

-- 
stanislav shalunov				| Speaking only for myself.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?877ld9vg5p.fsf>