hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Reword docs

Browse Source
This commit is contained in:
Joe Farebrother
2022-07-19 12:09:50 +01:00
parent 4d0957711b
commit c152a27a68
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
java/ql/src/Security/CWE/CWE-1204/StaticInitializationVector.qhelp
View File

@@ -3,11 +3,10 @@
<overview>
<p>
A cipher needs an initialization vector (IV) when it is used in certain modes
such as CBC or GCM. Under the same secret key, IVs should be unique and ideally unpredictable.
Given a secret key, if the same IV is used for encryption, the same plaintexts result in the same ciphertexts.
This lets an attacker learn if the same data pieces are transferred or stored,
or this can help the attacker run a dictionary attack.
When a cipher is used in certain modes such as CBC or GCM, it requires an initialization vector (IV).
Under the same secret key, IVs should be unique and ideally unpredictable.
If the same IV is used with the same secret key, then the same plaintext results in the same ciphertext.
This can let an attacker learn if the same data pieces are transferred or stored, or help the attacker run a dictionary attack.
</p>
</overview>