New efficient padding methods secure against padding oracle attacks

Hyung Chul Kang; Myungseo Park; Dukjae Moon; Changhoon Lee; Jongsung Kim; Kimoon Kim; Juhyuk Kim; Seokhie Hong

doi:10.1007/978-3-319-30840-1_21

New efficient padding methods secure against padding oracle attacks

Hyung Chul Kang, Myungseo Park, Dukjae Moon, Changhoon Lee, Jongsung Kim, Kimoon Kim, Juhyuk Kim, Seokhie Hong

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Citations (Scopus)

Abstract

This paper proposes three new padding methods designed to withstand padding oracle attacks, which aim at recovering a plaintext without knowing the secret key by exploiting oracle’s characteristic of checking the padding during decryption. Of the ten existing padding methods, only two (ABYT-PAD and ABIT-PAD) can withstand padding oracle attacks. However, these methods are not efficient since they either use a random number generator or require MAC verification in applications. The three new padding methods proposed in this paper are secure against padding oracle attacks and more efficient compared to the two aforementioned padding methods.

Original language	English
Title of host publication	Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers
Editors	Aaram Yun, Soonhak Kwon
Publisher	Springer Verlag
Pages	329-342
Number of pages	14
ISBN (Print)	9783319308395
DOIs	https://doi.org/10.1007/978-3-319-30840-1_21
Publication status	Published - 2016
Event	18th International Conference on Information Security and Cryptology, ICISC 2015 - Seoul, Korea, Republic of Duration: 2015 Nov 25 → 2015 Nov 27

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	9558
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Other

Other	18th International Conference on Information Security and Cryptology, ICISC 2015
Country/Territory	Korea, Republic of
City	Seoul
Period	15/11/25 → 15/11/27

Keywords

CBC mode of operation
Padding methods
Padding oracle attack

ASJC Scopus subject areas

Theoretical Computer Science
Computer Science(all)

Access to Document

10.1007/978-3-319-30840-1_21

Cite this

Kang, H. C., Park, M., Moon, D., Lee, C., Kim, J., Kim, K., Kim, J., & Hong, S. (2016). New efficient padding methods secure against padding oracle attacks. In A. Yun, & S. Kwon (Eds.), Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers (pp. 329-342). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9558). Springer Verlag. https://doi.org/10.1007/978-3-319-30840-1_21

New efficient padding methods secure against padding oracle attacks. / Kang, Hyung Chul; Park, Myungseo; Moon, Dukjae et al.

Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers. ed. / Aaram Yun; Soonhak Kwon. Springer Verlag, 2016. p. 329-342 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9558).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Kang, HC, Park, M, Moon, D, Lee, C, Kim, J, Kim, K, Kim, J & Hong, S 2016, New efficient padding methods secure against padding oracle attacks. in A Yun & S Kwon (eds), Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 9558, Springer Verlag, pp. 329-342, 18th International Conference on Information Security and Cryptology, ICISC 2015, Seoul, Korea, Republic of, 15/11/25. https://doi.org/10.1007/978-3-319-30840-1_21

Kang HC, Park M, Moon D, Lee C, Kim J, Kim K et al. New efficient padding methods secure against padding oracle attacks. In Yun A, Kwon S, editors, Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers. Springer Verlag. 2016. p. 329-342. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-319-30840-1_21

Kang, Hyung Chul ; Park, Myungseo ; Moon, Dukjae et al. / New efficient padding methods secure against padding oracle attacks. Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers. editor / Aaram Yun ; Soonhak Kwon. Springer Verlag, 2016. pp. 329-342 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{2e0299460f1b4fc8a9a1ac0746b101dd,

title = "New efficient padding methods secure against padding oracle attacks",

abstract = "This paper proposes three new padding methods designed to withstand padding oracle attacks, which aim at recovering a plaintext without knowing the secret key by exploiting oracle{\textquoteright}s characteristic of checking the padding during decryption. Of the ten existing padding methods, only two (ABYT-PAD and ABIT-PAD) can withstand padding oracle attacks. However, these methods are not efficient since they either use a random number generator or require MAC verification in applications. The three new padding methods proposed in this paper are secure against padding oracle attacks and more efficient compared to the two aforementioned padding methods.",

keywords = "CBC mode of operation, Padding methods, Padding oracle attack",

author = "Kang, {Hyung Chul} and Myungseo Park and Dukjae Moon and Changhoon Lee and Jongsung Kim and Kimoon Kim and Juhyuk Kim and Seokhie Hong",

note = "Funding Information: This research was supported by Basic Science Research Program through the National Research Foundation of Korea (NRF) funded by the Ministry of Education (Grant No. 2013R1A1A2059864). Publisher Copyright: {\textcopyright} Springer International Publishing Switzerland 2016.; 18th International Conference on Information Security and Cryptology, ICISC 2015 ; Conference date: 25-11-2015 Through 27-11-2015",

year = "2016",

doi = "10.1007/978-3-319-30840-1_21",

language = "English",

isbn = "9783319308395",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Verlag",

pages = "329--342",

editor = "Aaram Yun and Soonhak Kwon",

booktitle = "Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers",

}

TY - GEN

T1 - New efficient padding methods secure against padding oracle attacks

AU - Kang, Hyung Chul

AU - Park, Myungseo

AU - Moon, Dukjae

AU - Lee, Changhoon

AU - Kim, Jongsung

AU - Kim, Kimoon

AU - Kim, Juhyuk

AU - Hong, Seokhie

N1 - Funding Information: This research was supported by Basic Science Research Program through the National Research Foundation of Korea (NRF) funded by the Ministry of Education (Grant No. 2013R1A1A2059864). Publisher Copyright: © Springer International Publishing Switzerland 2016.

PY - 2016

Y1 - 2016

N2 - This paper proposes three new padding methods designed to withstand padding oracle attacks, which aim at recovering a plaintext without knowing the secret key by exploiting oracle’s characteristic of checking the padding during decryption. Of the ten existing padding methods, only two (ABYT-PAD and ABIT-PAD) can withstand padding oracle attacks. However, these methods are not efficient since they either use a random number generator or require MAC verification in applications. The three new padding methods proposed in this paper are secure against padding oracle attacks and more efficient compared to the two aforementioned padding methods.

AB - This paper proposes three new padding methods designed to withstand padding oracle attacks, which aim at recovering a plaintext without knowing the secret key by exploiting oracle’s characteristic of checking the padding during decryption. Of the ten existing padding methods, only two (ABYT-PAD and ABIT-PAD) can withstand padding oracle attacks. However, these methods are not efficient since they either use a random number generator or require MAC verification in applications. The three new padding methods proposed in this paper are secure against padding oracle attacks and more efficient compared to the two aforementioned padding methods.

KW - CBC mode of operation

KW - Padding methods

KW - Padding oracle attack

UR - http://www.scopus.com/inward/record.url?scp=84961194137&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-30840-1_21

DO - 10.1007/978-3-319-30840-1_21

M3 - Conference contribution

AN - SCOPUS:84961194137

SN - 9783319308395

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 329

EP - 342

BT - Information Security and Cryptology - ICISC 2015 - 18th International Conference, Revised Selected Papers

A2 - Yun, Aaram

A2 - Kwon, Soonhak

PB - Springer Verlag

T2 - 18th International Conference on Information Security and Cryptology, ICISC 2015

Y2 - 25 November 2015 through 27 November 2015

ER -

New efficient padding methods secure against padding oracle attacks

Abstract

Publication series

Other

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this