0
votes
0answers
15 views

Which causes longer “break” time (in general)?

In general (if possible to determine) which would make an output harder to turn into plain text with a computer? Extreme Length (minor complexity change) Extreme algorithmic complexity (minor length ...
0
votes
0answers
21 views

applied mathematics ( specifically number theory) and cryptography reference

I'm not a programmer (although I did learn python for 2 years a while back, not sure if I remember much though) but I am someone who studies a lot of pure math, algebraic number theory and algebraic ...
3
votes
1answer
17 views

Convergent Encryption: integrity and authenticity

I have one question about convergent encryption. Suppose I use AES-256 in CBC mode. I need a 256 bits key and a 128 bits IV. If I use SHA-256 to hash one file, then I can use directly that hash as ...
2
votes
2answers
21 views

Maximum password length in PBKDF2

Haven't found any clear cut answer in Google so its up to you guys: DK = PBKDF2(PRF, Password, Salt, c, dkLen) Here, what is the upper limit of password length? ...
3
votes
2answers
37 views

CBC-MAC key can be added to ciphertext?

I use AES both CBC and CBC-MAC to encrypt some stuff. I generate one key for CBC and one different key for CBC-MAC. Does the second key (for CBC-MAC) need to be secret? How to join such key with the ...
1
vote
0answers
41 views

ECC cryptography with shorter signature when not needing high security?

I am new here and fairly new to cryptography, so if I say something wrong, let me know. I am trying to set up a system where a user can receive a temporary license key over the phone, put it into ...
0
votes
1answer
53 views

Variants of AES?

Would variants of AES provide the same level of security as AES, say by just replacing the S-box with another one, MDS matrix of Mixcolumn, etc.?
-2
votes
0answers
33 views

mixing SPN and Fiestel

Shall we design a block cipher by mixing a SPN and Fiestel together?Is it possible to combine the logics of AES and DES resulting into a good block cipher
-2
votes
0answers
50 views

How can one design a good block cipher?

Are there any other methods for designing a block cipher than Substitution and Permutation Network (SPN) and Feistel Network?
3
votes
2answers
77 views

Is this a plausible PBKDF?

Background: Hello, I'm working on a hobby project in which I might want to implement a key derivation function within a somewhat resource limited embedded system. For standard crypto functions, I ...
-1
votes
0answers
20 views

Digitally sign and verify a file using private/public keys and OpenSSL API [on hold]

I am signing a file using a private key and want to verify it using a public key. Until now I am only able to verify it with the privatekey/certificate file. This is how I generate the keys: ...
2
votes
2answers
56 views

Diffie–Hellman Ephemerality Nomenclature

Below is a short excerpt of available DH cipher suites available on a machine. I understand EDH is ephemeral DH, and that ECDH is for Elliptic-Curve DH which is computationally faster. ECDHE is both ...
2
votes
1answer
36 views

ElGamal signature scheme: Why is r included in s

In the ElGamal signature scheme we calculate a signature for a (hashed) message $m$ as $r \equiv_p g^k$, $s \equiv_{p-1} (m - xr) k^{-1}$ and verify it by checking $g^m \equiv_p y^r r^s$. Here ...
0
votes
0answers
20 views

Trying to use XSalsa20 but the decrypted text breaks of halfway [on hold]

Hi the following is a small CPP code that I wrote to try out XSalsa20 cipher. ...
1
vote
0answers
45 views

Recover plaintext from truncated ciphertext using AES for FPE

I am trying to implement an FPE for a 19-digit long number. I am trying to follow the lecture of Prof. Dan Boneh and here is how I understand it: Get the nearest power of two greater than $10^{19} ...
1
vote
0answers
34 views

IND-CCA2 secure schemes without Plaintext Awareness?

I have been reading up on IND-CCA2 security and was wondering: Are there efficient IND-CCA2 secure schemes that do not require plaintext awareness? I'm guessing yes - could someone point me to these ...
-1
votes
0answers
57 views

Design of S box [on hold]

What is the method to replace AES s box?. Is it possible to generate all the S box ,permutation of 0 to 255 using GF 256 logic similar to AES
1
vote
0answers
33 views

Regular MACs vs Carter-Wegman MAC

Carter-Wegman MAC variants (VMAC, UMAC etc) are known to be very fast and efficient when compared to MAC algorithms that are based on block ciphers and compression functions (like HMAC, CMAC etc). ...
1
vote
1answer
57 views

Private Key - Memory Lifecycle

I often heard about private key storage, but rarely about key life cycle in memory. For example, when SSL is used from one peer, the private key is used to sign messages or decrypt other peers' ...
4
votes
2answers
539 views

A patched SHA1 attempt for password verification

This is a classical scenario: For our web based authentication platform we have a username and a password field. User enters these values and presses Log In. The browser gathers the user data, ...
-1
votes
0answers
51 views

Can anyone help me decrypt this? [on hold]

We were told that GREENENVY was a hint but I don't know how to do anything from there. AU/W/ACBXMSN/IEHOFIE/NZ
5
votes
6answers
1k views

Cryptography vs Security

This may sound a little bit of basic but here it goes… Which of the following is correct? “Cryptography is under the security field”, or “Security is under the cryptography field?” Cryptography ...
3
votes
1answer
59 views

Entropy Loss of KDFs

Am I losing any entropy when using KDFs, such as the ones in NIST Special Publication 800-108? For example, can I derive 128-bit session keys from a (uniformly random) 128-bit master key?
0
votes
1answer
36 views

Detect desynchronization in HOTP authentication [duplicate]

In HOTP authentication, is there a way for a system to detect that the token has been desynchronized? If so how does it know that the OTP was generated from a desynchronized (but valid) token and is ...
-1
votes
0answers
28 views

Unknown compression algorithm [on hold]

I got data which is compressed but I fail to find the compression algorithm. The data is part of a larger file from which I know the layout, So I managed to find out few things. What I know: I ...
1
vote
0answers
42 views

Parallel variant of Carter-Wegman MAC with incremental property

Is there a variant of the Carter-Wegman MAC algorithm that is fast, parallel and has the property of incremental crypto?
0
votes
1answer
48 views

GPG & Mcrypt - difference?

in short I'm learning GUI programming in python and thought it could be interesting to make a small GUI for symmetric encryption. Not being mad/mathematical/experienced (take your pick) enough to try ...
3
votes
3answers
83 views

SRP-6 vulnerabilities when N is small

I'm one of the developers of an application which uses SRP-6 as the authentication mechanism. The authentication part of the code is very old and uses N with only 256 bits (all arithmetic is done in ...
5
votes
1answer
82 views

How are secure hashing and encryption algorithms proven?

Given that: You should always use proven secure hashing and encryption algorithms, rather than attempting to write your own. What's the process for criteria for an algorithm being proven? Is ...
1
vote
1answer
91 views

Rainbow tables, where have I got it wrong?

There seems to be some error in my understanding of the concept of rainbow tables, despite going through quite a bit of articles on it. Let me show what I don't seem to agree with. My plain text is ...
1
vote
0answers
45 views

How to generate ECC (160 bits) Keys with OpenSSL? [on hold]

I want to generate RSA Keys at 1024 bits with OpenSSL. I can do this with the following commands: To generate RSA Key at 1024 bits: ...
4
votes
2answers
1k views

Does SHA-1024 hash exist?

Does SHA-1024 cryptographic hash function exist similarly to SHA-512? If not, what's the reason for that? Links: SHA-2 at Wikipedia
2
votes
1answer
123 views

Simple proof that shows AES is not a uniform permutation on any n-bit string?

Is there a simple proof that shows AES is not a uniform permutation on any $n$-bit string? Since I'm just starting with crypto, I'd like to see a simple yet elegant proof for the said property. ...
0
votes
1answer
26 views

Keep GPG revocation certificate in safe place? [on hold]

Do I have to keep the revocation certificate of my GPG key in a safe place or may I place it in e.g. Dropbox to have it ready on all my machines? I know that, if compromised, the certificate can be ...
5
votes
1answer
192 views

Attacking a hardware AES implementation if it leaks the intermediate round states

Let's say that we have a hardware AES implementation that, on request, will encrypt or decrypt a 16-byte block of data in ECB mode using a fixed key, but refuses to reveal its fixed key. In other ...
2
votes
1answer
64 views

Encryption method with master key and user keys

I am working on a concept for a game that in the end will allow data sharing via plain text, but I would like to give the user the option of encrypting the data so that other players cannot modify it, ...
2
votes
0answers
41 views

Construct block cipher from a smaller one with mixing function

I read about the AEZ encryption scheme as presented at the CAESAR competition. To me it seems like a construction of an arbitrary length block cipher from a smaller one. The key component is the ...
5
votes
0answers
62 views

How dead is braid based cryptography

Braid groups has drawn the attention of cryptographers for a few years, as a promising platform for post-quantum cryptographic protocols. The security of the proposed schemes mostly relied on ...
1
vote
2answers
136 views

How to encrypt a file for random access

I am a programmer familiar with C/C++ and Python. Lately, we got an assignment from a team asking us to work on one of their projects: we need to make a small program to encrypt a large file using ...
-1
votes
0answers
29 views

Big crunch, the Data way? [on hold]

before exposing my problem I beg you all to excuse my bad english :).. let's take the bible book as an exemple with its 3,116,480 letters. (a file could also be considered as a book with its ...
3
votes
1answer
67 views

How can I fix a corrupted PGP file?

I've encrypted a file with PGP but for "security reasons" I thought it would be good to damage the header and add some extra bytes so that even if someone finds it it won't know for sure it's a PGP ...
5
votes
2answers
203 views

Is my id obfuscation algorithm secure?

I'm designing an id obfuscation system. My system includes: Embedded chips, each chip has a unique 32-bit address (id). Server Insecure low-bandwidth unstable one-way channels from the chips to the ...
-1
votes
0answers
40 views

Strengthening security of an encrypted file against forensic detection [on hold]

I have created a Truecrypt container for backup in the cloud, and I want to obfuscate to the greatest extend possible which software and algorithm was used to encrypt the data and to slow down any ...
3
votes
2answers
191 views

Rely on NSA Suite B Cryptography?

NSA's Suite B Cryptography suggests some cryptographic algorithms for encryption, digital signatures, message digests and key agreements. The selected algorithms and their key size are suggested by ...
1
vote
1answer
59 views

public key delivery without third party

I am currently working on an anonymous P2P file sharing application and I am elaborating some already existing solutions. Some of them allegedly provide point-to-point encryption using RSA ...
3
votes
3answers
149 views

Advantages of 64-bit CPU smartphone

Advantages of having a 64-bit CPU vs 32-Bit CPU smartphone … 3. Complex Encryption. Improved Security: 64-Bit can process incredibly large numbers allowing you to better encrypt data against ...
4
votes
4answers
589 views

Subverting the key generation step in RSA public key cryptography

I am interested in the ways the implementation of an RSA key generation implementation can or cannot be subverted so that the subverter has an advantage, but the owner of the key, and the people who ...
2
votes
1answer
41 views

Cryptanalysis of Nonlinear Table Lookup

I am trying to derive a symmetric key based on a master key, combined with a simple string. Based on my limited knowledge, it seems that something like PBKDF2 would do that for me in a well-defined ...
2
votes
2answers
65 views

Block-cipher based vs Hash based MAC

When it comes to MAC algorithms one can have many choices. CBC-MAC, CMAC, PMAC etc are some MAC algorithms that rely on block ciphers (ex AES) to generate a MAC. On the other hand HMAC is very popular ...

15 30 50 per page