Reply to post: Probably not as bad as it sounds

Not only is Zoom's strong end-to-end encryption not actually end-to-end, its encryption isn't even that strong

Henry Wertz 1 Gold badge

Probably not as bad as it sounds

Probably not as bad as it sounds. I mean, Zoom was likely unaware that ECB had this property and should probably use something else. But, the shocking results with something like the Linux penguin are using a raw image format*; it happens because ECB works 16 bytes at a time, producing the same output when the same 16 bytes are fed in. With 16-bit (2 byte per pixel) data you'll get plenty of runs of identical 16 bytes. Run an image through PNG, JPEG, or probably H.264 or H.265 Zoom is using and run it through ECB and it's going to be irretrievable gibberish.

*in fact, googling, a ppm file (which has a short text-based header for the first 3 lines followed by raw image data, in this case 16 bit per pixel...), probably stripped off those 3 lines, ECB ecnrypted the 16-bit image data, and put the 3 lines back up top so it's a valid PPM image file again.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon