International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Paper: New proofs for old modes

Authors:
Mark Wooding
Download:
URL: http://eprint.iacr.org/2008/121
Search ePrint
Search Google
Abstract: We study the standard block cipher modes of operation: CBC, CFB, and OFB and analyse their security. We don't look at ECB other than briefly to note its insecurity, and we have no new results on counter mode. Our results improve over those previously published in that (a) our bounds are better, (b) our proofs are shorter and easier, (c) the proofs correct errors we discovered in previous work, or some combination of these. We provide a new security notion for symmetric encryption which turns out to be rather useful when analysing block cipher modes. Finally, we pay attention to different methods for selecting initialization vectors for the block cipher modes, and prove security for a number of different selection policies. In particular, we introduce the concept of a `generalized counter', and prove that generalized counters suffice for security in (full-width) CFB and OFB modes and that generalized counters encrypted using the block cipher (with the same key) suffice for all three modes.
BibTeX
@misc{eprint-2008-17798,
  title={New proofs for old modes},
  booktitle={IACR Eprint archive},
  keywords={secret-key cryptography / block cipher modes, cbc, cfb, ofb},
  url={http://eprint.iacr.org/2008/121},
  note={ mdw@distorted.org.uk 13951 received 13 Mar 2008, last revised 13 Mar 2008},
  author={Mark Wooding},
  year=2008
}