Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | (semi-OT): Correct definition of the DES OFB? |
|---|---|
| Date: | Sun, 24 Jul 2005 06:36:39 -0700 |
Hello All, I was reading the CISSP Exam Guide by Shon Harris (2nd Edition). She gives the following definition for DES in the OFB (Output Feedback) Mode. "...if DES is working in Output Feedback (OFB) Mode, it is functioning like a stream cipher by generating a stream of random binary bits to be combined with the plaintext to create ciphertext. The ciphertext is fed back to the algorithm to form a portion of the next input to encrypt the next stream of bits." (page 486) I thin, the last sentence "The ciphertext is fed back to the algorithm to form a portion of the next input to encrypt the next stream of bits" is incorrect. That is what happen in the Cipher Feeback (CFB) Mode, and NOT theOFB mode. In OFB mode, the "random value" is fed back into the algorithm. i.e. the "Random Value" from the previous operation becomes the IV for the next operation. Am I correct? Can anyone please validate this? Thanks. -- In Peace, Saqib Ali http://www.xml-dev.com/blog/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [1/2OT] Training for web-apps and db security, Ken Pfeil |
|---|---|
| Next by Date: | OWASP Guide 2.0 Release Candidate, Andrew van der Stock |
| Previous by Thread: | Securing PDF file on a Website, echow |
| Next by Thread: | RE: (semi-OT): Correct definition of the DES OFB?, Clement Dupuis |
| Indexes: | [Date] [Thread] [Top] [All Lists] |