Block Cipher Modes
Niels Ferguson, Bruce Schneier, Tadayoshi Kohno
Abstract
Niels Ferguson, Bruce Schneier, Tadayoshi Kohno
Abstract
If we want to encrypt something that is not exactly one block long, we have to use a block cipher mode. There are many ways to pad the plaintext, but the most important rule is that the padding must be reversible. The cipher block chaining (CBC) mode is one of the most widely used block cipher modes. The IV necessary for CBC encryption is generated by encrypting the nonce. Counter mode, generally known by the three-letter abbreviation CTR, is another block cipher encryption mode. This chapter discusses several modes, but there are really only two modes we would consider using: CBC and CTR. Then, the chapter highlights that all block cipher modes leak some information. If a collision occurs in CBC mode, there will be a leak of 128 bits of information about the plaintext. It is a good policy to keep the probability of such a collision low.
OpenAlex reports 5 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
If we want to encrypt something that is not exactly one block long, we have to use a block cipher mode. There are many ways to pad the plaintext, but the most important rule is that the padding must be reversible. The cipher block chaining (CBC) mode is one of the most widely used block cipher modes. The IV necessary for CBC encryption is generated by encrypting the nonce. Counter mode, generally known by the three-letter abbreviation CTR, is another block cipher encryption mode. This chapter discusses several modes, but there are really only two modes we would consider using: CBC and CTR. Then, the chapter highlights that all block cipher modes leak some information. If a collision occurs in CBC mode, there will be a leak of 128 bits of information about the plaintext. It is a good policy to keep the probability of such a collision low.
Key concepts: CBC-MAC, Block cipher mode of operation, Block cipher, Cryptographic nonce, Triple DES, Transposition cipher, Computer science, Plaintext