12.1 Initialization Vector Security

hposton / python-for-cybersecurity

This repository holds the Python scripts discussed in the Infosec Institute's Python for Cybersecurity learning Path

GNU General Public License v3.0

308 stars 193 forks source link

12.1 Initialization Vector Security #10

Open ianp89 opened 1 month ago

ianp89 commented 1 month ago

Hi, again, thanks for your content! I'm learning a lot.

I thought I remembered learning that IV's should also be kept secret as best practice.

If someone got ahold of the IV and knew the encryption algorithm and mode, they might be able to use an IV to make more informed guesses on the actual secret key through brute forcing.

Curious for responses to this. Thanks.