Paper 2003/098

Side Channel Attacks on CBC Encrypted Messages in the PKCS#7 Format

Vlastimil Klima and Tomas Rosa


Vaudenay has shown in [5] that a CBC encryption mode ([2], [9]) combined with the PKCS#5 padding [3] scheme allows an attacker to invert the underlying block cipher, provided she has access to a valid-padding oracle which for each input ciphertext tells her whether the corresponding plaintext has a valid padding or not. Having on mind the countermeasures against this attack, different padding schemes have been studied in [1]. The best one is referred to as the ABYT-PAD. It is designed for byte-oriented messages. It removes the valid-padding oracle, thereby defeating Vaudenay's attack, since all deciphered plaintexts are valid in this padding scheme. In this paper, we try to combine the well-known cryptographic message syntax standard PKCS#7 [8] with the use of ABYT-PAD instead of PKCS#5. Let us assume that we have access to a PKCS#7CONF oracle that tells us for a given ciphertext (encapsulated in the PKCS#7 structure) whether the deciphered plaintext is correct or not according to the PKCS#7 (v1.6) syntax. This is probably a very natural assumption, because applications usually have to reflect this situation in its behavior. It could be a message for the user, an API error message, an entry in the log file, different timing behavior, etc. We show that access to such an oracle again enables an attacker to invert the underlying block cipher. The attack requires single captured ciphertext and approximately 128 oracle calls per one ciphertext byte. It shows that we cannot hope to fully solve problems with side channel attacks on the CBC encryption mode by using a “magic” padding method or an obscure message-encoding format. Strong cryptographic integrity checks of ciphertexts should be incorporated instead.

Available format(s)
Secret-key cryptography
Publication info
Published elsewhere. Presented at the 2nd International Conference (NATO PfP/PWP) Security and Protection of Information, Brno, Czech Republic, April 28 - 30, 2003.
CBCsymmetrical encryptionpaddingABYT-PADABIT-PADPKCS#7cryptanalysisside channel attackconfirmation oracle
Contact author(s)
vlastimil klima @ i cz
2003-05-21: received
Short URL
Creative Commons Attribution


      author = {Vlastimil Klima and Tomas Rosa},
      title = {Side Channel Attacks on CBC Encrypted Messages in the PKCS#7 Format},
      howpublished = {Cryptology ePrint Archive, Paper 2003/098},
      year = {2003},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.