Re: [hybi] AES-128-CTR not much safer, but not fast either

Yuta Kitamura <yutak@chromium.org> Wed, 12 January 2011 08:54 UTC

DomainKey-Signature: a=rsa-sha1; c=nofws; d=google.com; s=beta; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; b=VmDPDTKrMQPTgdin23ficWXPRQkLE7rNTwKIMY7zqNRj/m4iNf7LZ7lcwx36GrEYrV 8dp+G1M0Hl5jHZukZvYg==
MIME-Version: 1.0
Sender: yutak@google.com
In-Reply-To: <20110110000908.GD5743@1wt.eu>
References: <20110110000908.GD5743@1wt.eu>
Date: Wed, 12 Jan 2011 17:56:28 +0900
Message-ID: <AANLkTi=LBeH6RReypRb1BoH=2-jw-_qxRsaqQCT13MNA@mail.gmail.com>
From: Yuta Kitamura <yutak@chromium.org>
To: Willy Tarreau <w@1wt.eu>
Content-Type: multipart/alternative; boundary="00163630f261745fae0499a2600c"
Cc: Hybi <hybi@ietf.org>
Subject: Re: [hybi] AES-128-CTR not much safer, but not fast either
Precedence: list

Hi,

On Mon, Jan 10, 2011 at 9:09 AM, Willy Tarreau <w@1wt.eu> wrote:

> willy@pcw:~/c$ time ./aes-128-ctr-get
> Found the 'GET\n' pattern on the wire after 1608425803 bytes
>
>
The probability that you get some four-byte data from a random byte sequence
is 1/(256^4) = 1/4294967296 for each byte. Please note that the order of
256^4 is almost same as the above number. This means that, statistically,
it's quite possible to find a four-byte 'GET\n' sequence (and any other
four-byte sequence) in a few gigabytes of random bytes.

I think your experiment has just shown that the output of AES-128-CTR is
random enough.

I'm sorry if I'm missing your point.

Thanks,
Yuta

Re: [hybi] AES-128-CTR not much safer, but not fa… Thomson, Martin
[hybi] AES-128-CTR not much safer, but not fast e… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Adam Barth
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Adam Barth
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Adam Barth
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Adam Barth
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Adam Barth
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Adam Barth
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Scott Ferguson
Re: [hybi] AES-128-CTR not much safer, but not fa… Bruce Atherton
Re: [hybi] AES-128-CTR not much safer, but not fa… Yuta Kitamura
Re: [hybi] AES-128-CTR not much safer, but not fa… Willy Tarreau
Re: [hybi] AES-128-CTR not much safer, but not fa… Cedric Vivier