sdrapkin/SecurityDriven.Inferno

Why is ECB mode okay?

MSACATS opened this issue · 2 comments

In AesCtrCryptoTransform, this.aes.Mode is set to CipherMode.ECB. Why is this okay? There's no comment explaining why the usual ECB weaknesses wouldn't apply here.

From Wikipedia:
902px-ctr_encryption_2 svg 1

The "block cipher encryption" box is the cipher running in ECB mode.

Thanks. That's why it's so critical in CTR mode that the IV not be reused, right?