> > > * to pad data to a power of 2, you repeat the data
> > No.  This lends an attack as well, since the attacker can try and assume
> > that several of the last blocks of the file are the same. 
> 
> Does that matter given that the mode we are using is rolling?
Yes, since its only rolling within a block.  After two blocks you start
getting the same encryption (your XORing all zeros, so you're essentially
just encrypting as a stream cipher).  I'm not saying this does give a
cryptanalyst any info, but it might.

> I can see why just using nulls would be a little concerning since that
> would produce a next to unlimited set of known plain and ciphertexts (if I
> remember the mode right, something with all null would make each block
> just the last one encrypted) - but now I think you are getting overly
> paranoid...

You're just now noticing?



_______________________________________________
Devl mailing list
Devl at freenetproject.org
http://lists.freenetproject.org/mailman/listinfo/devl

Reply via email to