Skip to content

Commit c152a27

Browse files
Reword docs
1 parent 4d09577 commit c152a27

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

java/ql/src/Security/CWE/CWE-1204/StaticInitializationVector.qhelp

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,10 @@
33

44
<overview>
55
<p>
6-
A cipher needs an initialization vector (IV) when it is used in certain modes
7-
such as CBC or GCM. Under the same secret key, IVs should be unique and ideally unpredictable.
8-
Given a secret key, if the same IV is used for encryption, the same plaintexts result in the same ciphertexts.
9-
This lets an attacker learn if the same data pieces are transferred or stored,
10-
or this can help the attacker run a dictionary attack.
6+
When a cipher is used in certain modes such as CBC or GCM, it requires an initialization vector (IV).
7+
Under the same secret key, IVs should be unique and ideally unpredictable.
8+
If the same IV is used with the same secret key, then the same plaintext results in the same ciphertext.
9+
This can let an attacker learn if the same data pieces are transferred or stored, or help the attacker run a dictionary attack.
1110
</p>
1211
</overview>
1312

0 commit comments

Comments
 (0)