4 ms·
Why is OFB worse than CTR? Admittedly I'm just glancing at the wikipedia block cipher modes of operation page, but it is totally non-obvious to me that OFB wit
by nialo 10y ago
Why is OFB worse than CTR? Admittedly I'm just glancing at the wikipedia block cipher modes of operation page, but it is totally non-obvious to me that OFB with SHA1(msg) as an IV is worse than CTR with SHA1(msg) as the 'nonce'.
- tptacek 10y agoIt's everything that's bad about CTR and nothing that's good about it. Or, just let Rogaway explain: http://web.cs.ucdavis.edu/~rogaway/papers/modes.pdf http://web.cs.ucdavis.edu/~rogaway/papers/modes.pdf