Padding oracle attacks on multiple modes of operation

Authors:
Taekeon Lee;Jongsung Kim;Changhoon Lee;Jaechul Sung;Sangjin Lee;Dowon Hong
Affiliations:
Center for Information Security Technologies(CIST), Korea University, Seoul, Korea;Center for Information Security Technologies(CIST), Korea University, Seoul, Korea;Center for Information Security Technologies(CIST), Korea University, Seoul, Korea;Department of Mathematics, University of Seoul, Seoul, Korea;Center for Information Security Technologies(CIST), Korea University, Seoul, Korea;Information Security Technology Division, ETRI, Taejon, Korea
Venue:
ICISC'04 Proceedings of the 7th international conference on Information Security and Cryptology
Year:
2004

Citing 6
Cited 1

Concrete Security Analysis of CTR-OFB and CTR-CFB Modes of Operation

ICISC '01 Proceedings of the 4th International Conference Seoul on Information Security and Cryptology
Security Flaws Induced by CBC Padding - Applications to SSL, IPSEC, WTLS ...

EUROCRYPT '02 Proceedings of the International Conference on the Theory and Applications of Cryptographic Techniques: Advances in Cryptology
Known-IV Attacks on Triple Modes of Operation of Block Ciphers

ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Side-Channel Attacks on Symmetric Encryption Schemes: The Case for Authenticated Encryption

Proceedings of the 11th USENIX Security Symposium
Cryptanalysis of Some Recently-Proposed Multiple Modes of Operation

FSE '98 Proceedings of the 5th International Workshop on Fast Software Encryption
Key recovery attacks on the RMAC, TMAC, and IACBC

ACISP'03 Proceedings of the 8th Australasian conference on Information security and privacy

Error oracle attacks on several modes of operation

CIS'05 Proceedings of the 2005 international conference on Computational Intelligence and Security - Volume Part II

Quantified Score

Hi-index	0.00

Visualization

Abstract

In [12] Vaudenay presented side-channel attacks on the CBC encryption mode cipher under the padding oracle attack models, which enable an adversary to determine the correct message with knowledge of ciphertext. Black and Urtubia generalized these attacks in several directions, considering various padding schemes [4]. In this paper we extend these attacks to other kinds of modes of operation for block ciphers. Specifically, we apply the padding oracle attacks to multiple modes of operation with various padding schemes. As a results of this paper, 12 out of total 36 double modes and 22 out of total 216 triple modes are vulnerable to the padding oracle attacks. It means that the 12 double modes and the 22 triple modes exposed to these types of attacks do not offer the better security than single modes.