Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I want to know the best way of transferring a cryptographic initialization vector (IV) from the place where my data is encrypted to the place where my data is decrypted.
In other words, the IV should be randomly generated every time you encrypt a message (right?), so there needs to be some way of finding the IV when you decrypt.
I have heard of people simply concatenating the IV (in plain text) to the encrypted data. Is there any security risk with this?
The IV does not need to be kept secret, as the only secret data is the key (by definition).
As long as the IV is random, go right ahead and transmit it any way you like – concatenating it with the encrypted data is just fine.
(Of course, make sure you ARE protecting the integrity of the IV data, otherwise it won’t work….)