The Dangers of using ChatGPT for Coding: Flipping Bits in Ciphers and Why MACs Are So Important

Caute_cautim — Sun, 10 Mar 2024 04:51:57 GMT

Hi All

Some important lessons here: Prof Bill Buchanan:

I did a code review recently, and I noticed that the code was using AES with CBC (Cipher Block Chaining) mode. It involved saving encrypted data to database, and it just looked like copy-and-paste code. So, I took the database, and flipped a few bits, and showed the developer that I had changed the values of the transaction.

“How did you do that?”, “Well, I flipped some bits!”, “But, it is encrypted”, “You do not have a MAC to check”, “What’s a MAC?”. “Where did you get the code?”, “I got it from ChatGPT”.

I stopped there and was worried about the rest of the software. I then asked whether they knew how CBC worked and was met with a blank face.

https://medium.com/asecuritysite-when-bob-met-alice/the-dangers-for-chatgpt-for-coding-flipping-bits-in-ciphers-and-why-macs-are-so-important-fd1a980a684f

Regards

Caute_Cautim

Re: The Dangers of using ChatGPT for Coding: Flipping Bits in Ciphers and Why MACs Are So Important

Early_Adopter — Mon, 11 Mar 2024 00:02:04 GMT

“Cipher Block Chaining is a mode of operation that was specifically designed to use both transposition and substitution and padding make it hard for programmers to escape on a Friday. On purpose, simply because I do not like programmers, or weekends.” Xor Munger, Cryptologist to the Stars

topic The Dangers of using ChatGPT for Coding: Flipping Bits in Ciphers and Why MACs Are So Important in Tech Talk

The Dangers of using ChatGPT for Coding: Flipping Bits in Ciphers and Why MACs Are So Important

Re: The Dangers of using ChatGPT for Coding: Flipping Bits in Ciphers and Why MACs Are So Important