CRCs and Data Integrity
CRCs are specifically designed to protect against common types of errors on communication channels, where they can provide quick and reasonable assurance of the integrity of messages delivered. However, they are not suitable for protecting against intentional alteration of data.
Firstly, as there is no authentication, an attacker can edit a message and recompute the CRC without the substitution being detected. When stored alongside the data, CRCs and cryptographic hash functions by themselves do not protect against intentional modification of data. Any application that requires protection against such attacks must use cryptographic authentication mechanisms, such as message authentication codes or digital signatures (which are commonly based on cryptographic hash functions).
Secondly, unlike cryptographic hash functions, CRC is an easily reversible function, which makes it unsuitable for use in digital signatures.
Thirdly, CRC is a linear function with a property that CRC(X XOR Y) = CRC(X) XOR CRC(Y); as a result, even if the CRC is encrypted with a stream cipher (or mode of block cipher which effectively turns it into stream cipher, such as OFB or CFB), both message and associated CRC can be manipulated without knowledge of encryption key; this was one of the well-known design flaws of the Wired Equivalent Privacy (WEP) protocol.
Read more about this topic: Cyclic Redundancy Check
Famous quotes containing the words data and/or integrity:
“Mental health data from the 1950’s on middle-aged women showed them to be a particularly distressed group, vulnerable to depression and feelings of uselessness. This isn’t surprising. If society tells you that your main role is to be attractive to men and you are getting crow’s feet, and to be a mother to children and yours are leaving home, no wonder you are distressed.”
—Grace Baruch (20th century)
“Dreams have a poetic integrity and truth. This limbo and dust- hole of thought is presided over by a certain reason, too. Their extravagance from nature is yet within a higher nature.”
—Ralph Waldo Emerson (1803–1882)