News for hackers. Stuff that matters.

A comment on 1Password GPU brute-force with 3M hash/s. Parent comment

Re:1Password GPU brute-force with 3M hash/s by tptacek on Wednesday April 17, 2013 @12:05PM (#5565223)
I think you mean CBC mode IV, not CTR mode IV. If they'd been using CTR mode, not having the nonce would be a dealbreaker for the attack; no matter what the cracker did, it would never generate the right keystream.

(I don't think using CTR mode would have made a lot of sense and am not saying the use of CBC mode is a design weakness; it isn't.)

[ Parent | on HN ]
Re:1Password GPU brute-force with 3M hash/s by marshray on Wednesday April 17, 2013 @12:12PM (#5565278)
D'oh! Thanks, corrected.

And I was just on everyone else for conflating CTR mode nonces and CBC mode IVs...

[ Parent | on HN ]