symmetric-cipher-attacks

Analyze symmetric cipher weaknesses and reproduce attack vectors.

1.6k|204|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/yaklang/hack-skills --skill symmetric-cipher-attacks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: symmetric-cipher-attacks
Source: https://github.com/yaklang/hack-skills/tree/main/skills/symmetric-cipher-attacks
Command: npx skills add https://github.com/yaklang/hack-skills --skill symmetric-cipher-attacks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyze and reproduce symmetric cipher weaknesses and attack vectors to aid understanding of cryptographic vulnerabilities and defenses.

Core Features & Use Cases

  • Padding oracle (CBC) attacks, including byte-wise decryption techniques
  • ECB mode detection, cut-and-paste attacks, and CBC bit flipping
  • State-recovery concepts (LCG/MT) and related cryptanalysis techniques with practical walkthroughs

Quick Start

Run a lab exercise to practice CBC padding oracle decryption, ECB byte-at-a-time attacks, and related cipher-attack workflows against controlled test data.

Frequently Asked Questions about symmetric-cipher-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a CBC padding oracle attack to decrypt ciphertext byte-by-byte?

ECB mode detection relies on identical plaintext blocks producing identical ciphertext blocks. You can perform cut-and-paste attacks by swapping ciphertext blocks or execute byte-at-a-time attacks to reveal hidden data.

What is a CBC bit flipping attack and how does it manipulate ciphertext?

CBC bit flipping alters ciphertext bits to predictably change corresponding plaintext bits in the next block. It targets predictable plaintext structures to modify encrypted data without knowing the key.

Can I recover internal state for LCG or Mersenne Twister pseudorandom number generators?

LCG and Mersenne Twister state recovery analyzes observed outputs to reconstruct internal PRNG states. By gathering sufficient sequential outputs, you can predict future values and reverse cryptographic operations relying on them.

Are these symmetric cipher attack techniques suitable for CTF cryptography challenges?

These symmetric cipher attack techniques are explicitly designed for CTF cryptography challenges and lab-based defensive assessments. They provide practical walkthroughs for padding oracle, ECB, CBC, and state-recovery workflows against controlled test data.

What are the limitations of using padding oracle attacks against secure cipher implementations?

Padding oracle attacks fail against implementations using authenticated encryption or constant-time decryption checks. Secure setups prevent distinguishing valid from invalid padding, halting byte-wise decryption and state manipulation.