4 ms·
That picture has become some sort of meme of itself (I've heard it referred as "you can see penguins through ECB") because it's so damn popular. However ECB is
by hatsunearu 4y ago
That picture has become some sort of meme of itself (I've heard it referred as "you can see penguins through ECB") because it's so damn popular.
However ECB is a lot worse than "you can see data patterns"--with a chosen plaintext attack (very common scenario in networking and storage applications) any dumbass can decrypt it trivially.
- evh 4y agoThose who want to try it for themselves can check out https://cryptopals.com/sets/2/challenges/12 https://cryptopals.com/sets/2/challenges/12 (and that entire set).
- hatsunearu 4y agoOh man, I loved doing cryptopals back in the day. I should try again.
- Terry_Roll 4y agoI still havent see a regex for ECB though!
- heavenlyblue 4y ago> with a chosen plaintext attack (very common scenario in networking and storage applications) any dumbass can decrypt it trivially. No you can’t get decryption key using chosen plaintext attack with AES. Read here: https://crypto.stackexchange.com/questions/1512/why-is-aes-resistant-to-known-plaintext-attacks https://crypto.stackexchange.com/questions/1512/why-is-aes-r...
- oconnor663 4y agoParent said "decrypt", not "get the decryption key", and parent is correct. The attack looks kind of similar to a "padding oracle attack", where you work one byte at a time using a block boundary.