Is it possible to use AES with an IV in ECB mode?

Question

From http://php.net/manual/en/function.mcrypt-encrypt.php, I saw the following codes using AES with an IV in ECB mode,

<?php
    $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB);
    $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
    $key = "This is a very secret key";
    $text = "Meet me at 11 o'clock behind the monument.";
    echo strlen($text) . "\n";

    $crypttext = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, $text, MCRYPT_MODE_ECB, $iv);
    echo strlen($crypttext) . "\n";
?>

But from wiki http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation, it says ECB does not need an IV. Is it really possible to use AES with an IV in ECB mode? In this ECB mode, will the additional IV provide a little bit more security comparing to when it is not used?

Answer 1

ECB is perfectly acceptable for Counter (CTR) Mode Encryption/Decryption: http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Counter_.28CTR.29

NOTE that CTR Decryption is CTR Encryption.

Answer 2

First of all, you wouldn't have anywhere to put this IV. ECB works by taking plaintext blocks one by one and encrypting them with the key to produce the corresponding ciphertexts. There is just no place to use the IV. This is how much the theory says.

I don't know the details of how mcrypt_encrypt works, but I would suspect that when using ECB it just does not use the IV. Try it out by encrypting in ECB providing different IVs. If the result is the same, the function just doesn't use IV.

Answer 3

There's no way to use an IV in ECB mode. This is kind of moot, however, as you should

Never Ever use ECB mode for Anything, Ever*.

In more general terms, you probably shouldn't be using crypto primitives directly, but rather using a crypto library like keyczar that abstracts away these sorts of decisions.

** Actually, there are some very specialized uses for ECB, such as 'secure' pseudorandom permutations - but you certainly shouldn't be using ECB for anything related to encrypting data.

Answer 4

ECB doesn't perform chaining between blocks so there is no way to use IV. mcrypt uses the same APi for all modules. The IV is simply ignored for ECB because the ECB module has following function defined as,

int _has_iv() { return 0; }