Information AboutMalleability (cryptography) |
|
A malleable encryption algorithm allows transformations on the ciphertext to produce meaningful changes in the plaintext. That is, given a Plaintext and the corresponding Ciphertext , it is possible to generate so that the decryption of is a function of the original plaintext , with arbitrary but known functions and . Stream Cipher s are examples of malleable encryption algorithms. In a stream cipher, the ciphertext is produced by taking the Exclusive Or of the plaintext and a stream based on a secret key (). Given an arbitrary , it is possible to generate . Malleability is an undesirable property in a general-purpose cryptosystem, since it allows an attacker to modify the contents of a message. For example, suppose that a bank uses a stream cipher to hide its financial information, and a user sends an encrypted message containing, say, "TRANSFER $0000100.00 TO ACCOUNT #199." If an attacker can modify the message on the wire, and can guess the format of the unencrypted message, the attacker can change the amount of the transaction, or the recipient of the funds. Other malleable encryption algorithms include: RSA . If the attacker obtains the ciphertext ( where is the plaintext and is the public modulus) the attacker can produce the ciphertext corresponding to any by multiplying the original ciphertext by . For this reason, RSA is commonly used together with padding methods such as OAEP or PKCS1. It is possible to build non-malleable encryption algorithms from malleable ones. |
|
|