AES-CTR key reuse attack with same IV and known plain text

Asked Nov 29 '19 at 17:09

Active Nov 29 '19 at 17:09

Viewed 141 times

this is from an IT Security exercise which my friend and me cannot solve.

Given

Our approach was to use the known equivalence of

$E(A) \oplus E(B) = A \oplus B$

From there the only option we see is to brute force $A$ and $B$ for the known $\oplus$ product.

Is there a smarter way to get $A$, $B$? Thanks for any hints!

asked Nov 29 '19 at 17:09

Elias

Possible duplicate of Why must IV/key-pairs not be reused in CTR mode? That is two-time pad. – kelalaka Nov 29 '19 at 17:12
I agree, because there aren't any other mathematical equivalences to work with, so you are left guessing the bit values within $A$ and $B$ (not sure if you'd call that brute force though). How to do that depends on the type of message - in this case PNG pixels. That you have the header doesn't make it any easier. – Maarten Bodewes Nov 29 '19 at 17:40
Comment below if you have a generic method of getting the original values within PNG files that are XOR'ed together. Happy to reopen for that. – Maarten Bodewes Nov 29 '19 at 17:41

0 Answers0