W3C home > Mailing lists > Public > public-webcrypto@w3.org > September 2012

RE: Support for ECB

From: Anthony Nadalin <tonynad@microsoft.com>
Date: Thu, 13 Sep 2012 17:27:30 +0000
To: Zooko Wilcox-OHearn <zooko@leastauthority.com>, "public-webcrypto@w3.org" <public-webcrypto@w3.org>
Message-ID: <B26C1EF377CB694EAB6BDDC8E624B6E7662A8B8E@BL2PRD0310MB362.namprd03.prod.outlook.com>
There are existing usages of ECB, why would we force a change here? 

-----Original Message-----
From: Zooko Wilcox-OHearn [mailto:zooko@leastauthority.com] 
Sent: Thursday, September 13, 2012 9:17 AM
To: public-webcrypto@w3.org
Subject: Re: Support for ECB

On Tue, Sep 11, 2012 at 12:15 PM, Ryan Sleevi <sleevi@google.com> wrote:
> To bootstrap any of the following modes with suitable performance
> characteristics:
> CTR || CCM (which starts with CTR) || GCM (which starts with CTR)

I don't understand how a situation could arise where a programmer would need to use ECB mode to implement these (or for any other purpose). It seems like that situation would arise only if the underlying platform offered ECB mode but not CTR mode. But why don't we just discourage implementors from offering ECB mode and encourage them to offer CTR mode? (And, as previously suggested, encourage them to offer an AES block-encryption function that operates on only a single block.)


Zooko Wilcox-O'Hearn

Founder, CEO, and Customer Support Rep -- Least Authority Enterprises


Received on Thursday, 13 September 2012 17:28:08 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 21:17:13 UTC