Question: Please explain in full detail and show an attack that proves this new scheme would not be secure. Thank you, I will rate! 2. Implementers
Please explain in full detail and show an attack that proves this new scheme would not be secure. Thank you, I will rate!

2. Implementers are sometimes cautious about IVs in block cipher modes and may attempt to "protect" them. One idea for protecting an IV is to prevent it from directly appearing in the ciphertext. The modified CBC encryption below sends the IV through the block cipher before including it in the ciphertext: \begin{tabular}{|l|} c0{0,1}blenEnc(k,m1m): \\ c0:=F(k,c0) \\ for i=1 to : \\ ci:=F(k,mici1) \\ return c0c1c \\ \hline \end{tabular} This ciphertext can be decrypted by first computing c0:=F1(k,c0) and then doing usual CBC decryption on c0c. Show that this new scheme is not CPA-secure
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
