Re: [Cryptography] Killing two IV related birds with one stone

2013-09-13 Thread Nico Williams
On Wed, Sep 11, 2013 at 06:51:16PM -0400, Perry E. Metzger wrote: > It occurs to me that specifying IVs for CBC mode in protocols > like IPsec, TLS, etc. be generated by using a block cipher in counter > mode and that the IVs be implicit rather than transmitted kills two > birds with one stone. >

Re: [Cryptography] Killing two IV related birds with one stone

2013-09-12 Thread Yaron Sheffer
On 09/12/2013 03:15 AM, Perry E. Metzger wrote: On Wed, 11 Sep 2013 20:01:28 -0400 Jerry Leichter wrote: ...Note that if you still transmit the IVs, a misimplemented client could still interoperate with a malicious counterparty that did not use the enforced method for IV calculation. If you don

Re: [Cryptography] Killing two IV related birds with one stone

2013-09-12 Thread Perry E. Metzger
On Thu, 12 Sep 2013 17:41:56 +0300 Yaron Sheffer wrote: > On 09/12/2013 03:15 AM, Perry E. Metzger wrote: > > On Wed, 11 Sep 2013 20:01:28 -0400 Jerry Leichter > > wrote: > >>> ...Note that if you still transmit the IVs, a misimplemented > >>> client could still interoperate with a malicious coun

Re: [Cryptography] Killing two IV related birds with one stone

2013-09-11 Thread Perry E. Metzger
On Wed, 11 Sep 2013 20:01:28 -0400 Jerry Leichter wrote: > > ...Note that if you still transmit the IVs, a misimplemented > > client could still interoperate with a malicious counterparty > > that did not use the enforced method for IV calculation. If you > > don't transmit the IVs at all but calc

Re: [Cryptography] Killing two IV related birds with one stone

2013-09-11 Thread Jerry Leichter
On Sep 11, 2013, at 6:51 PM, Perry E. Metzger wrote: > It occurs to me that specifying IVs for CBC mode in protocols > like IPsec, TLS, etc. be generated by using a block cipher in counter > mode and that the IVs be implicit rather than transmitted kills two > birds with one stone. Of course, now y