]
Nick Sawadsky updated JGRP-2386:
--------------------------------
Summary: Support for encryption ciphers that require an initialization vector (was:
Support for encryption ciphers that require an IV)
Support for encryption ciphers that require an initialization vector
--------------------------------------------------------------------
Key: JGRP-2386
URL:
https://issues.jboss.org/browse/JGRP-2386
Project: JGroups
Issue Type: Enhancement
Affects Versions: 4.1.5, 3.6.19
Reporter: Nick Sawadsky
Assignee: Bela Ban
Priority: Minor
By default, Encrypt sets sym_algorithm to "AES". As a result, the default
cipher mode is used, which is ECB. ECB encrypts the same plaintext block to the same
ciphertext every time, which can give attackers insight into the types of messages being
exchanged.
Modes like CBC, that use a random initialization vector (IV) are not susceptible to this
problem, except in the case where a given IV is reused with the same key.
It would be good to modify Encrypt to support ciphers that require an IV, such as
AES/CBC/PKCS5Padding.