BiteSizedChunks.comLearn one small thing at a time.

Course contentsShow

Security

85Block Cipher Fundamentals and Structure
86Feistel Network Architecture
87DES: Design and Weaknesses
883DES: Triple DES and Key Options
89AES: Rijndael Selection and Design
90AES Round Transformations
91AES Key Expansion and Schedule
92Block Size and Security Implications
93Alternative Block Ciphers: Blowfish, Twofish, Serpent
94Hardware Acceleration and AES-NI
95ECB Mode: Structure and Fatal Weaknesses
96CBC Mode: Chaining Blocks for Security
97CBC Padding Oracle Attacks
98CTR Mode: Turning Block Ciphers into Streams
99CTR Mode Nonce Reuse Attacks
100CFB and OFB Modes: Feedback Mechanisms
101GCM Mode: Authenticated Encryption Standard
102GCM Implementation Pitfalls
103CCM Mode: Counter with CBC-MAC
104XTS Mode: Disk Encryption Standard
105Comparing Authenticated Encryption Modes
106Mode Selection for Different Scenarios
107Why Padding is Necessary in Block Ciphers
108PKCS#7 and PKCS#5 Padding Schemes
109ISO/IEC 7816-4 and Other Padding Methods
110Padding Oracle Attack Fundamentals
111Exploiting Padding Oracles Step-by-Step
112Real-World Padding Oracle Vulnerabilities
113Defending Against Padding Oracle Attacks
114Padding in Authenticated Encryption Modes
115Stream Cipher Fundamentals and XOR Operations
116RC4: Design, Vulnerabilities, and Deprecation
117ChaCha20: Modern Stream Cipher Design
118Stream Cipher Security Properties and Requirements
119Nonce Management in Stream Ciphers
120Synchronous vs Self-Synchronizing Stream Ciphers
121Stream Ciphers vs Block Ciphers: When to Use Each
122Why Authentication Matters in Encryption
123Encrypt-then-MAC Construction
124MAC-then-Encrypt and Encrypt-and-MAC Pitfalls
125AES-GCM: Galois/Counter Mode
126AES-GCM Implementation Considerations
127ChaCha20-Poly1305
128AES-CCM and Other AEAD Modes
129Associated Data in AEAD
130AEAD Security Properties and Limitations
131Nonces vs IVs: Definitions and Differences
132IV Requirements for Different Modes
133Nonce Reuse Attacks in CTR and GCM
134Generating Secure Random IVs and Nonces
135Deterministic IVs and Predictability Attacks
136IV Transmission and Storage
137Key Derivation Functions (KDFs) Overview
138PBKDF2: Password-Based Key Derivation
139Modern KDFs: scrypt, Argon2, and HKDF
140Salts in Key Derivation

Security

85Block Cipher Fundamentals and Structure
86Feistel Network Architecture
87DES: Design and Weaknesses
883DES: Triple DES and Key Options
89AES: Rijndael Selection and Design
90AES Round Transformations
91AES Key Expansion and Schedule
92Block Size and Security Implications
93Alternative Block Ciphers: Blowfish, Twofish, Serpent
94Hardware Acceleration and AES-NI
95ECB Mode: Structure and Fatal Weaknesses
96CBC Mode: Chaining Blocks for Security
97CBC Padding Oracle Attacks
98CTR Mode: Turning Block Ciphers into Streams
99CTR Mode Nonce Reuse Attacks
100CFB and OFB Modes: Feedback Mechanisms
101GCM Mode: Authenticated Encryption Standard
102GCM Implementation Pitfalls
103CCM Mode: Counter with CBC-MAC
104XTS Mode: Disk Encryption Standard
105Comparing Authenticated Encryption Modes
106Mode Selection for Different Scenarios
107Why Padding is Necessary in Block Ciphers
108PKCS#7 and PKCS#5 Padding Schemes
109ISO/IEC 7816-4 and Other Padding Methods
110Padding Oracle Attack Fundamentals
111Exploiting Padding Oracles Step-by-Step
112Real-World Padding Oracle Vulnerabilities
113Defending Against Padding Oracle Attacks
114Padding in Authenticated Encryption Modes
115Stream Cipher Fundamentals and XOR Operations
116RC4: Design, Vulnerabilities, and Deprecation
117ChaCha20: Modern Stream Cipher Design
118Stream Cipher Security Properties and Requirements
119Nonce Management in Stream Ciphers
120Synchronous vs Self-Synchronizing Stream Ciphers
121Stream Ciphers vs Block Ciphers: When to Use Each
122Why Authentication Matters in Encryption
123Encrypt-then-MAC Construction
124MAC-then-Encrypt and Encrypt-and-MAC Pitfalls
125AES-GCM: Galois/Counter Mode
126AES-GCM Implementation Considerations
127ChaCha20-Poly1305
128AES-CCM and Other AEAD Modes
129Associated Data in AEAD
130AEAD Security Properties and Limitations
131Nonces vs IVs: Definitions and Differences
132IV Requirements for Different Modes
133Nonce Reuse Attacks in CTR and GCM
134Generating Secure Random IVs and Nonces
135Deterministic IVs and Predictability Attacks
136IV Transmission and Storage
137Key Derivation Functions (KDFs) Overview
138PBKDF2: Password-Based Key Derivation
139Modern KDFs: scrypt, Argon2, and HKDF
140Salts in Key Derivation

← Security

Lesson 133 of 3,052·3. Symmetric Cryptography Deep DivePro lesson

Nonce Reuse Attacks in CTR and GCM

Explore the catastrophic consequences of nonce reuse in counter mode and GCM, including plaintext recovery attacks.

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.

See pricing Back to course