[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
iaPCBC papers
A slightly-revised version of the draft is at
http:/home/smb/lib/wwwfiles/papers/draft-bellovin-iapcbc-00.txt -- the claim
that this mode is resistant to exhaustive key search has been deleted, since
several people found successful attacks on that. The Gligor-Donescu paper
it's based on is at file:/home/smb/lib/wwwfiles/papers/iapcbc.ps.
A further change is needed (but has not yet been made) to the Internet draft:
as written, it is suspectible to some truncation attacks. While the practical
significance of those attacks is unclear, the issue should certainly be
addressed; there are several possible ways to do that. But I wanted to first
post a version that deletes the key search claim.
--Steve Bellovin