Skip to content

IV should not equal key #16

@cryptochecktool

Description

@cryptochecktool

In your code: https://github.com/mirror/jdownloader/blob/f274b29897aad2e0ff0d4fd148e42aadf8b622fa/src/org/jdownloader/container/D.java #L322
Use IV=key.
But iv should be set to a sufficiently random number, otherwise it will lead to a CPA attack.
If IV=key, then CCA attacks will be allowed, that is, only need to send a specific message for encryption, then the key can be restored.
For specific attack methods, see: [https://cedricvanrompay.gitlab.io/cryptopals/challenges/[27](https://cedricvanrompay.gitlab.io/cryptopals/challenges/27](https://cedricvanrompay.gitlab.io/cryptopals/challenges/%5B27%5D(https://cedricvanrompay.gitlab.io/cryptopals/challenges/27). html).html

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions