Messages in this thread | ![/](/images/icornerl.gif) | | Date | Mon, 8 Mar 2004 14:58:29 -0500 | From | Jean-Luc Cooke <> | Subject | Re: dm-crypt, new IV and standards |
| |
Agreed. Good catch David.
JLC
On Wed, Mar 03, 2004 at 09:40:05PM +0000, David Wagner wrote: > Jean-Luc Cooke wrote: > >Christophe and I's scheme of IV = firstIV + blockNum > >for initial setup and IV = IV + 2^64 for IV updates will work fine > > That's not ideal. I'd suggest IV = HMAC_k(firstIV, blockNum) or somesuch. > Sequential IV's aren't a good choice with CBC -- they can leak a little > bit of information about the first block of plaintext, in some cases.
-- http://www.certainkey.com Suite 4560 CTTC 1125 Colonel By Dr. Ottawa ON, K1S 5B6 - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| ![\](/images/icornerr.gif) |