[jboss-jira] [JBoss JIRA] (JGRP-2386) Support for encryption algorithms that require an IV

[Nick Sawadsky (Jira)]

Nick Sawadsky created JGRP-2386:
-----------------------------------

             Summary: Support for encryption algorithms that require an IV
                 Key: JGRP-2386
                 URL: https://issues.jboss.org/browse/JGRP-2386
             Project: JGroups
          Issue Type: Enhancement
    Affects Versions: 3.6.19, 4.1.5
            Reporter: Nick Sawadsky
            Assignee: Bela Ban


By default, Encrypt sets sym_algorithm to "AES". As a result, the default cipher mode is used, which is ECB. ECB encrypts the same plaintext block to the same ciphertext every time, which can give attackers insight into the types of messages being exchanged.

Modes like CBC, that use a random initialization vector (IV) are not susceptible to this problem, except in the case where a given IV is reused with the same key. 

It would be good to modify Encrypt to support ciphers that require an IV, such as AES/CBC/PKCS5Padding.



--
This message was sent by Atlassian Jira
(v7.13.8#713008)