12.1 Initialization Vector Security

hposton / python-for-cybersecurity

This repository holds the Python scripts discussed in the Infosec Institute's Python for Cybersecurity learning Path

GNU General Public License v3.0

327 stars 202 forks source link

12.1 Initialization Vector Security #10

Open ianp89 opened 4 months ago

ianp89 commented 4 months ago

Hi, again, thanks for your content! I'm learning a lot.

I thought I remembered learning that IV's should also be kept secret as best practice.

If someone got ahold of the IV and knew the encryption algorithm and mode, they might be able to use an IV to make more informed guesses on the actual secret key through brute forcing.

Curious for responses to this. Thanks.