4 ms·
Guess OP never cracked a book on crypto. The aes penguin is like two decades old now. https://raw.githubusercontent.com/pakesson/diy-ecb-penguin/master/Tux_ecb
by demondemidi 3y ago
Guess OP never cracked a book on crypto. The aes penguin is like two decades old now.
https://raw.githubusercontent.com/pakesson/diy-ecb-penguin/master/Tux_ecb.png https://raw.githubusercontent.com/pakesson/diy-ecb-penguin/m...
- anonym29 3y agoDo any specific books come to mind for you as recommended reading for those looking to learn more?
- noam_k 3y agoI recommend going through the CryptoPals[0] challenges. I'm halfway and they really beat into you the problems with ECB. [0]https://cryptopals.com/ https://cryptopals.com/
- tptacek 3y agoJP Aumasson's "Serious Cryptography" and David Wong's "Real World Cryptography" are good starts.
- computerfriend 3y agoCryptography Engineering is the classic. Serious Cryptography is also good and more recent.
- tptacek 3y agoI liked Cryptography Engineering ("Practical Cryptography") but it definitely doesn't hold up; it was obsolete by 2010. You'd get yourself in trouble implementing from it today.
- kccqzy 3y agoSerious Cryptography by Jean-Philippe Aumasson.
- coppsilgold 3y agoA block cipher in ECB mode is a substitution cipher, with all the weaknesses that entails. A substitution cipher with a lot of bits per symbol.
- tptacek 3y agoFor over a decade, the Internet believed the problem with ECB was that you could see penguins through it. Implementors looked at that, said "I don't care if you can see penguins through this", and plowed ahead. In fact the real problems with ECB are that you can rewrite the plaintext and, in many common configurations, decrypt it outright --- the same insight got us the BEAST TLS attack.