Skip to main content
Cryptography

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

5
  • $\begingroup$ While it is an interesting question to swap around the points of view (encryption done by the attacker), any attempt to weaken encryption deliberately is a bad thing. Even if there are encryption schemes with such a weakness (I'd call it a honeypot), why should the attacker consider to use them instead of proper ones? $\endgroup$ Commented Aug 22, 2016 at 16:06
  • $\begingroup$ @tylo, I'm not suggesting "weakening" the encryption. I'm suggesting that if the malware uses an algorithm that has a chosen plaintext vulnerability, it might be possible to pre-create a set of files that exploit it. Yes, the attacker is probably using AES and so it won't be vulnerable to any known attacks. But as is often said around here, "attackers always get better." $\endgroup$ Commented Aug 22, 2016 at 16:16
  • 1
    $\begingroup$ Well, if the malware is using bad crypto, then it is also no problem in breaking it. But calling it a "brilliant idea" is giving a false impression, and "this might spur further research" suggests, that it might be useful somehow in the future. But from a research point this is already quite clear: The attacker chooses the encryption scheme, and a serious attacker will not choose a vulnerable one. So this "counter measure" would have to be considered as snake oil. $\endgroup$ Commented Aug 22, 2016 at 16:36
  • $\begingroup$ I consider it brilliant because it's the first instance I know of where a chosen plaintext attack would be practical. $\endgroup$ Commented Aug 22, 2016 at 16:38
  • 2
    $\begingroup$ @tylo and John, please don't call the miscreant attacker. Maybe call the miscreant extortionist. An attacker is a specific entity in crypto-analysis that indicates the person trying to break the cryptographic system. In this case that's - strangely enough - the legit user of the IT system. $\endgroup$ Commented Aug 22, 2016 at 17:10