Re:Minerva: Practically exploitable side-channel leakage in ...
by bob1029 on Thursday October 03, 2019 @05:36PM
(#21152508)
What's wrong with using AES in CBC mode?
[ Parent
| on HN ]
Re:Minerva: Practically exploitable side-channel leakage in ...
by exabrial on Friday October 04, 2019 @10:51AM
(#21158269)
See my original comment about attack surface. Given the correct set of circumstances, transmitting the IV in the clear with CBC could possibly open you up to chosen ciphertext/plaintext attacks. And you better be doing encrypt-then-prepend-IV-then-MAC with CBC. Just a lot of gotchas that may or may not be relevant, depending on your environment.