Uploaded image for project: 'JGroups'
  1. JGroups
  2. JGRP-2386

Support for encryption ciphers that require an initialization vector

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Minor
    • 4.1.6
    • 4.1.5, 3.6.19
    • None

    Description

      By default, Encrypt sets sym_algorithm to "AES". As a result, the default cipher mode is used, which is ECB. ECB encrypts a given plaintext block to the same ciphertext every time, which can allow attackers to see patterns in messages being exchanged.

      Modes like CBC, that use a random initialization vector (IV) avoid this problem (assuming a different IV is used for each message).

      It would be good to modify Encrypt to support ciphers that require an IV, such as AES/CBC/PKCS5Padding.

      Attachments

        Activity

          People

            rhn-engineering-bban Bela Ban
            nsawadsky Nick Sawadsky (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: