What are the issues in using AES-CBC for disk encryption? (Mark all that apply.)
Note: Make sure you select all of the correct options—there may be more than one!
- If the adversary guesses the plaintext (decrypted) value of the first 128-bit block, the adversary can unroll the rest of the chain and decrypt the rest of the 4-KByte disk block
- If the adversary flips a single bit in the encrypted block, the decrypted value will also change by exactly a single bit
- An adversary can manipulate the ciphertext of a block to flip a specific bit in the decrypted plaintext block, with minimal changes to the rest of the plaintext block
- When using the same key and IV, encrypting the same plaintext data produces the same ciphertext