Padding oracle attacks on CBC-mode encryption with secret and random IVs

Lecture Notes in Computer Science

Volumn 3557, Issue , 2005, Pages 299-319

  Yau, Arnold K L ^a   Paterson, Kenneth G ^a   Mitchell, Chris J ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

CBC mode; ISO standards; Padding oracle; Side channel

Indexed keywords

CRYPTOGRAPHY; KNOWLEDGE ENGINEERING; VECTORS;

CBC-MODE ENCRYPTION; INITIALIZATION VECTORS (IV);

SECURITY OF DATA;

EID: 26444609149     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/11502760_20     Document Type: Conference Paper

References (9)

1. ISO/IEC 9797-1: Information technology - Security techniques - Message Authentication Codes (MACs) - Part 1: Mechanisms using a block cipher, 1999.
2. ISO/IEC 10118-1 (2nd edition): Information technology - Security techniques - Hash-functions - Part 1: General, 2000.
3. ISO/IEC 2nd CD 10116 (revision): Information technology - Security techniques - Modes of operation for an n-bit block cipher, 2002. (Second committee draft of proposed 3rd edition of the standard).
4. ISO/IEC FCD 10116 (2nd edition): Information technology - Security techniques - Modes of operation for an n-bit block cipher, 2004. (Final committee draft of proposed 3rd edition of the standard).
5. M. Bellare, A. Desai, E. Jokipii, and P. Rogaway. A Concrete Analysis of Symmetric Encryption: Analysis of the DES Modes of Operations. In 38th IEEE Symposium on Foundations of Computer Science, pages 394-409. IEEE, 1997.
6. J. Black and H. Urtubia. Side-Channel Attacks on Symmetric Encryption Schemes: The Case for Authenticated Encryption. In Proceedings of the 11th USENIX Security Symposium, San Francisco, CA, USA, August 5-9, 2002, pages 327-338. USENIX, 2002.
7. B. Canvel, A. Hiltgen, S. Vaudenay, and M. Vuagnoux. Password Interception in a SSL/TLS Channel. In D. Boneh, editor, Advances in Cryptology - CRYPTO 2003, volume 2729 of Lecture Notes in Computer Science, pages 583-599. Springer-Verlag, 2003.
8. K.G. Paterson and A. Yau. Padding Oracle Attacks on the ISO CBC Mode Padding Standard. In T. Okamoto, editor, Topics in Cryptology - CT-RSA 2004, volume 2964 of Lecture Notes in Computer Science, pages 305-323. Springer-Verlag, 2004.
9. S. Vaudenay. Security Flaws Induced by CBC Padding - Applications to SSL, IPSEC, WTLS .... In L. Knudsen, editor, Advances in Cryptology - EUROCRYPT 2002, volume 2332 of Lecture Notes in Computer Science, pages 534-545. Springer- Verlag, 2002.