 is a random bit string used in cryptographic operations, such as encryption and decryption, to enhance security and prevent certain attacks. It acts as an additional "salt" that is mixed with the message itself to produce a unique ciphertext each time.

It is extremely important that the same IV is never used twice. Each message to be encrypted must use a unique and unpredictable IV. If the IV is reused, attackers can exploit this vulnerability to decrypt messages or manipulate their content.

Below is the Python example code that dangerously uses an Initialization Vector (IV) in AES-CBC encryption mode. In this example, the Initialization Vector (IV) is set to a fixed value, which is a bad practice:

The use of a fixed Initialization Vector (IV), especially using a publicly known value, is a security risk in cryptography. It causes the following vulnerabilities:

: When the IV is fixed or predictable, an attacker can predict the encryption of the first block before the encryption process begins. This significantly reduces the security of encryption, as the attacker can prepare for possible attacks knowing how the encryption starts.

Same messages produce the same encryption

: If the same IV and encryption are used repeatedly, the same original messages produce identical encrypted messages. This can reveal information about the content of messages and enable pattern-based attacks, such as chosen-plaintext attacks.

: In particular, in CBC mode, the encryption of the first block depends only on the IV and the original message. If the attacker knows or can guess part of the original message, using a fixed IV can make it easier to decrypt the rest of the message.

The correct practice is to use a cryptographically secure randomly generated IV for each encryption operation. IV generally does not need to be secret, but it should be unpredictable and unique for each encryption round. This significantly improves security, preventing the vulnerabilities mentioned above.

## What is an Initialization Vector (IV)?

**Initialization Vector (IV)** is a random bit string used in cryptographic operations, such as encryption and decryption, to enhance security and prevent certain attacks. It acts as an additional "salt" that is mixed with the message itself to produce a unique ciphertext each time.

---

## Do not reuse IV

It is extremely important that the same IV is never used twice. Each message to be encrypted must use a unique and unpredictable IV. If the IV is reused, attackers can exploit this vulnerability to decrypt messages or manipulate their content.

---

## Example

Below is the Python example code that dangerously uses an Initialization Vector (IV) in AES-CBC encryption mode. In this example, the Initialization Vector (IV) is set to a fixed value, which is a bad practice:

```python
from Crypto.Cipher import AES
from Crypto.Random import get_random_bytes
import os

# Suppose we have data to encrypt
data_to_encrypt = b"Secret message that needs encryption"

# Using fixed IV (bad practice!)
iv = b"1234567890123456"

# Generate a random encryption key
key = get_random_bytes(16) # AES requires the key to be either 16, 24 or 32 bytes long

# Create an AES-CBC cipher object
cipher = AES.new(key, AES.MODE_CBC, iv)

# Encryption
encrypted_data = cipher.encrypt(data_to_encrypt.ljust(16, b"\0")) # Data must be filled in the correct block size
```

---

## Vulnerability in the use of fixed IV

The use of a fixed Initialization Vector (IV), especially using a publicly known value, is a security risk in cryptography. It causes the following vulnerabilities:

**Predictability**: When the IV is fixed or predictable, an attacker can predict the encryption of the first block before the encryption process begins. This significantly reduces the security of encryption, as the attacker can prepare for possible attacks knowing how the encryption starts.

**Same messages produce the same encryption**: If the same IV and encryption are used repeatedly, the same original messages produce identical encrypted messages. This can reveal information about the content of messages and enable pattern-based attacks, such as chosen-plaintext attacks.

**Revealed beginning of the message**: In particular, in CBC mode, the encryption of the first block depends only on the IV and the original message. If the attacker knows or can guess part of the original message, using a fixed IV can make it easier to decrypt the rest of the message.

---

## Use IV correctly

The correct practice is to use a cryptographically secure randomly generated IV for each encryption operation. IV generally does not need to be secret, but it should be unpredictable and unique for each encryption round. This significantly improves security, preventing the vulnerabilities mentioned above.


Initialization vector (IV) and its vulnerabilities in cryptography

From the history of cryptography to current use, the basics of encryption, technologies, applications and their impact on security.

Welcome to Hakatemia's cryptography course!

In this course, we will go through the basics of cryptography, the most important encryption algorithms, and their modern applications. The course is beginner-friendly and practical.

The goal is that after the course you will know what cryptography is, what it is used for, and how to choose the right encryption techniques and settings for different purposes.

What is cryptography? Basic concepts and uses

Introduction to Cryptography

Caesar Cipher: The Ancient Code That Changed Communication

The Enigma Machine: How WWII Codebreakers Unlocked the Greatest Mystery of the War

Historical encryption techniques

Checksums

What are hash functions and what are they used for?

Cracking Hashes: How Does It Work?

MD5 hash - a broken classic

PBKDF2, BCrypt, SCrypt and Argon2

SHA2 vs SHA3 vs PBKDF2 vs bcrypt vs SCrypt vs Argon2: Which to choose for password storage?

Diversion functions

What is MAC and why is it needed?

Different MAC algorithms

MAC algorithms

Random numbers in cryptography

Random numbers

Initialization vector (IV) and its vulnerabilities in cryptography

What is an Initialization Vector (IV)?

Learn to hack — start here