Integrity checking method

Alice has four blocks of plaintext, P_o,P₁,P₂,P₃, which she encrypts using CBC mode to obtain C₀,C₁,C₂,C₃. She then sends the IV and ciphertext to Bob. Upon receiving the ciphertext, Bob plans to verify the integrity as follows. He’ll first decrypt to obtain the putative plaintext, and then he’ll re-encrypt this plaintext using CBC mode and the received IV. If he obtains the same C₃ as the final ciphertext block, he will trust the integrity of the plaintext.

a. Suppose that Trudy changes C\ to X, leaving all other blocks and the IV unchanged. Will Bob detect that the data lacks integrity?

b. Suppose that Trudy changes C3 to the value Y, leaving all other blocks and the IV unchanged. Will Bob detect that the data lacks integrity?

c. Is Bob’s integrity checking method secure?

Using CBC mode, Alice encrypts four blocks of plaintext, P_Q, P₁, P₂, P₃ and she sends the resulting ciphertext blocks, C₀,C₁,C₂,C₃, and the IV to Bob. Suppose that Trudy is able to change any of the ciphertext blocks before they are received by Bob.

If Trudy knows Pi, show that she can replace P\ with X. Hint: Determine C so that if Trudy replaces Co with C, when Bob decrypts C\, he will obtain X instead of Pi.

 

Solution: