Breaking CBC: Statistical Pattern Analysis in Cipher Block Chaining
Dr. Albert Carlson and Patrick Doherty analyze statistical pattern leakage in Cipher Block Chaining (CBC) modes, demonstrating non-randomness in ciphertext blocks.
Summary
The Goal of Pseudo-Random Ciphertext
A core objective of symmetric block ciphers is ensuring that ciphertext output exhibits uniform statistical randomness, revealing zero information about underlying plaintext.
Analyzing Cipher Block Chaining (CBC) Mode Operations
Dr. Albert Carlson and Patrick Doherty examine the mathematical initialization vector (IV) chaining mechanisms in CBC mode implementations.
Discovering Statistical Non-Randomness and Pattern Artifacts
The researchers present empirical statistical tests demonstrating non-random distribution patterns and entropy anomalies across repeated CBC blocks.
Implications for Cryptographic Protocol Implementations
The authors discuss vulnerabilities arising from poor entropy sources and provide developers with recommendations on transitioning to authenticated Galois/Counter Mode (GCM).
Related talks
Crypto and Privacy Village·6 hr 22 min
The full recorded proceedings and technical sessions from Day 2 of the DEF CON 29 Crypto and Privacy Village in Las Vegas.
Crypto and Privacy Village·8 hr 37 min
The complete recorded proceedings and presentations from Day 1 of the DEF CON 29 Crypto and Privacy Village in Las Vegas.
Village Presentations·22 min
Nick Sullivan
Cloudflare head of cryptography Nick Sullivan introduces CFSSL, an open-source Go toolkit for automated TLS certificate authority operations and PKI bundling.