DataTerminology.comNEW
Also known as: Block Cipher Modes
Algorithms that define how to apply a block cipher to data to achieve confidentiality and integrity at scale.
DESCRIPTION
Block cipher modes of operation specify procedures for encrypting variable-length data using a fixed-size block cipher like AES. Common modes include ECB (discouraged), CBC, CTR, and GCM, each with distinct security and performance properties. Authenticated encryption modes such as GCM provide both confidentiality and integrity in a single construction. Correct use of initialization vectors or nonces is essential to prevent reuse attacks. NIST’s SP 800-38 series recommends and standardizes these modes for practical systems. Choosing the right mode depends on requirements for parallelism, error propagation, and authentication.
ALTERNATIVE DEFINITIONS
NIST SP 800-38A
This recommendation specifies five confidentiality modes of operation for block cipher algorithms.
Highlights standardized confidentiality modes and formal guidance from NIST.
Wikipedia
A block cipher mode of operation is an algorithm that uses a block cipher to provide an information service such as confidentiality or authenticity.
General-purpose definition emphasizing services beyond confidentiality.
Cloudflare
Block cipher modes of operation are methods that enable a block cipher to encrypt data larger than a block.
Focuses on practical purpose of handling arbitrary-length data.
RELATED TERMS
AES Electronic Codebook Cipher Block Chaining Counter AES-GCM Authenticated Encryption Initialization Vector Padding MAC
COMPETING TERMS
RELATIONS
- Narrower: Cipher Block Chaining
KNOWLEDGE AREAS
Data Security Data Privacy & Compliance Software Engineering Infrastructure
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Chief Information Security Officer Software Developer Cloud Architect
EXTERNAL SOURCES
- Wikipedia - Block cipher mode of operation
- NIST - Primary modes of operation recommendation
- NIST - GCM authenticated encryption mode specification
- Cloudflare - Educational overview of common modes
TOP QUESTIONS
What are block cipher modes of operation?
They are algorithms that specify how to use a block cipher like AES to encrypt variable-length data, providing confidentiality and sometimes integrity.
Category: Definition
Why is ECB mode discouraged?
ECB reveals patterns because identical plaintext blocks produce identical ciphertext blocks, leaking structure in the data.
Category: Mistakes
What mode should I use for authenticated encryption?
GCM is a widely adopted AEAD mode providing confidentiality and integrity with good performance and parallelism.
Category: BestPractices
How important are nonces and IVs?
Critical. Reusing nonces or IVs in modes like GCM or CTR can catastrophically compromise security.
Category: Risk
Do modes affect performance?
Yes. CTR and GCM enable parallelism, while CBC is more sequential. Choice impacts throughput and latency.
Category: Performance
Are block cipher modes standardized?
Yes. NIST SP 800-38 series specifies recommended modes for confidentiality and authenticated encryption.
Category: Standards
How do padding schemes relate to modes?
Padding is required for some modes like CBC when plaintext is not a multiple of block size; streaming modes avoid padding.
Category: Concepts
What is the difference between CBC and CTR?
CBC chains blocks and propagates errors; CTR turns a block cipher into a stream, supporting parallel encryption and no padding.
Category: Comparison
Can I implement modes myself?
Avoid homegrown cryptography. Use vetted libraries and correct APIs to prevent subtle, dangerous mistakes.
Category: BestPractices