Identifying encryption method from encrypted string

Question

Is it possible to identify the encryption method or atleast rule out some, by looking at the encrypted text?

For example, if you have 3 encrypted strings where the first 10 characters are the same on each of the strings.

Answer 1

Yes, it is possible under certain circumstances to determine the encryption method used purely from ciphertexts. The first question that a cryptanalysis faced with such a problem must answer what general type the cipher is. Does the cipher appear to be a classical cipher, asymmetric cipher, or symmetric cipher?

• Classical ciphers - These are typically written on a piece of paper. The character frequencies are often non-random. Often times people invent their own classical ciphers so there is a decent chance that your cipher is not in any book. Classical ciphers are typically easy to break by statistical analysis, once broken one knows the method used.

• Asymmetric ciphers - I may be wrong and I've been unable to find any information online about this, are asymmetric ciphers like RSA distinguishable from random noise? Putting that issue aside for the moment, generally protocols that use asymmetric ciphers require certain metadata that would reveal the cipher used. Assuming no metadata the size of the ciphertext can also help an analyst as RSA tends to use much larger keys than ECC or AES.

• Symmetric ciphers - Many of the other answers have claimed that determining the method of encryption for symmetric ciphers is impossible if the symmetric ciphers have not been broken (if they are "good"). While it is certainly true that "bad" symmetric ciphers are distinguishable in some cases, lets assume that whatever ciphers we are going to look at are "good" random permutations with the cavet that many ciphers (especially stream ciphers) currently in use are not "good". We have two classes of symmetric ciphers, stream ciphers and block ciphers.

  • Stream ciphers - Given enough ciphertexts one can distinguish between a block cipher and stream cipher because the stream cipher ciphertexts can be only any length whereas the block cipher ciphertexts must always be in increments of the block size. Distinguishing between two stream ciphers is far more difficult but possible under additional assumptions. For example, the plaintext is all latin characters. All one has to do then is try all possible keys and all possible stream ciphers. If you find a key that reliably decrypts the ciphertext to plaintext containing all latin characters, you win you've determined the stream cipher.

  • Block ciphers - Block ciphers have a two properties that are easy to determine from ciphertexts. The block size and that the block cipher is running in ECB mode. One merely needs to look at the length of the ciphertexts to deduce the block size, this does not necessary tell you what cipher was used, but in semi-rare cases certain block sizes are unique to a cipher. For example if you discover that the block is 96 bits, you are probably dealing with the 3-way cipher. If a cipher repeats the same blocks in a probabilistically unlikely fashion the cipher is likely running in ECB mode.

On the nature of "good" ciphers.

Many ciphers currently in use do not fit the definition given above of a good cipher. For example DES has a key size that is smaller than it's block size. Given two ciphers of the small block size and the different key sizes it should be possible in theory to distinguish between them given only ciphertexts. Furthermore, many currently used stream ciphers are designed with ease of implementation in mind and therefore don't use non-linear mappings. For instance GMS system used by many mobile phones uses the a5/1 cipher. This ciphers is merely a LFSR and can not only be distinguished but can be broken in seconds given sufficient pre-computation time.

Answer 2

If the encryption system is any good, then no. The output of a (symmetric) encryption algorithm is supposed to be indistinguishable from pure random. If you can distinguish encryption output from pure random with probability greater than 1/2 (i.e. you are given two strings of bits, and you can tell which one comes from an encryption system with better success on average than pure luck), then the encryption algorithm is said to be "broken". An example of such an algorithm is RC4 (not that being broken does not mean that decryption without the key is easy; RC4-protected SSL connections still appear to be mostly safe).

However, the used encryption algorithm is not generally supposed to be secret information. That algorithm exists as code or specific hardware somewhere; it is amenable to reverse engineering. It is very difficult to know how much algorithm secrecy may resist an attacker, and that's a problem since a good security policy should aim at quantifying things. Secrecy of a symmetric key can be quantified: a 128-bit key is secret up to 2¹²⁷ (on average) trials. Since such a precise measure cannot be achieved for the algorithm itself, it is usually assumed that the name of the algorithm is known by everybody. Correspondingly, encrypted message formats often begin with an additional header which plainly states which algorithm is used (such a header avoids many maintenance headaches, especially when several distinct algorithms are in use).

Answer 3

No, It's NOT possible. Output of a cryptography algorithm should be like an output of a pseudo random number generator. There is no any identification to identify it. If it's possible the cryptography algorithm is NOT a good cryptography algorithm.