Re: FW: Last Call: The AES Cipher Algorithm in the SNMP's User-based Security Model to Proposed Standard

Uri Blumenthal <[email protected]> Mon, 28 Apr 2003 15:52:19 -0400
Newsgroups gmane.ietf.snmpv3
Organization Lucent Tehcnologies / Bell Labs
Message-ID <[email protected]>
Daniel Chuang wrote:
> I have one simple question on this draft, why the aes cfb mode is chosen
> instead of cbc mode ?

Because of its properties, of course.

1. Preserves the size of the plaintext (CBC would increase it).
2. Has error propagation within one block (like CBC).
3. Has chaining dependency (reordering ciphertext blocks affects
    decryption, like CBC).
4. Uses AES crypto engine in Encryption mode only (no need to
    implement AES_decrypt).