CBC Bit-flipping attack¶

RootMe Challenge: Flip it: An elite hacker team is sharing tools. Some tools seem interesting, but you need to join their team to access them.

bit_flipping_attack.py

• The Block Cipher SQUARE - Daemen, Knudsen, Rijmen

• SANS Institute AES CBC Bit Flipping

Counter moves¶

CBC bit-flipping rewrites plaintext because the mode carries no integrity. Authenticated encryption such as AES-GCM removes the malleability. Defenders’ notes on this are under the application layer as a target.