Linked Questions
23 questions linked to/from Why is plain-hash-then-encrypt not a secure MAC?
-4
votes
2
answers
638
views
AES_256_ENCRYPT_CTR(key, sha-1(plainText)+plainText) VS AES-GCM, which is more secure? [duplicate]
What if we encrypt sha-1 hash of the plain text, along with the plain text using AES-256 in CTR mode?
How much future proof the above method would be in comparison to AES-GCM or any other method ...
0
votes
2
answers
281
views
Why not just encrypt the message and the hash of the message to achieve cryptographic integrity? [duplicate]
I've always seen MACs as a way to provide integrity and authentication. You would just append it to some message in clear.
But this is clearly not the case when you're doing Encrypt Then Mac. When ...
1
vote
1
answer
6k
views
Hash-Then-Encrypt or Encrypt-Then-Hash?
The question is about site-to-site transmission where the recipient needs to decrypt the incoming data.
What method is more secure and make it harder to decrypt, Hash-Then-Encrypt or Encrypt-Then-Hash?...
6
votes
2
answers
4k
views
HMAC versus encrypted hash
When encrypting a message with a symmetric key, it seems like the best practice is to first encrypt the message, then run the cipher text and key through HMAC, appending the result to the cipher text. ...
1
vote
1
answer
3k
views
Establish a secure connection between a Bluetooth Low Energy device and an Android App using ECDH
Im very new to security and trying to learn how to establish a secure connection between a android application and a Bluetooth Low Energy device with limited hardware performance.
The procedure:
App:...
4
votes
1
answer
2k
views
Does CBC encryption of a hash provide authenticity?
Given a message $M$ and a cryptographic hash function $H$, let $f(M) = E_K(M || H(M))$ where $E_K$ is AES-128-CBC encryption with PKCS#5 padding. Take $H = \textrm{SHA-256}$ if it matters. In other ...
3
votes
1
answer
1k
views
Using checksum instead of hash for authenticating ciphers
Lets assume for a specific situation we cannot use authenticated encryption like GCM ...
If we were to use CTR, what would you think of using a checksum on the plaintext then encrypt the whole.
The ...
4
votes
1
answer
1k
views
Why do different applications of hash functions demand different properties of the hash function?
A strong cryptographic hash function in general must guarantee several properties, including: Preimage resistance, second preimage resistance and collision resistance. It turns out, however, that ...
4
votes
1
answer
2k
views
Is there a generic attack on encrypted CRC32 when used as a MAC?
I am examining a protocol that uses CRC32 as a MAC (see note 1) the weaknesses of this method but I would nevertheless like to see if it is just weak or actually relatively easily to break.
The ...
5
votes
1
answer
2k
views
Is appending the hash of the plaintext to the end of an encrypted message sufficient to ensure integrity?
Is appending the hash of the plaintext to the end of an encrypted message sufficient to ensure integrity?
My reasoning is that the attacker doesn't know all the plaintext, so by having a hash, the ...
6
votes
1
answer
449
views
Least-weak way to authenticate using only AES ECB/CBC
I have an embedded application that needs to occasionally get secure updates from a server. The only crypto library I have available for the chip is an AES-256 cipher (ECB and CBC, encrypt/decrypt).
...
4
votes
1
answer
2k
views
How to make cookies tamper-proof and secure by using encryption and hash / MAC
Our company has decided to ditch server side sessions in favor of storing authenticated information such as user id and access privilege information in a cookie.
Before everyone jumps up and down ...
8
votes
1
answer
1k
views
Tiny Firmware Authentication
I am developing a product based on the NXP LPC11C24 microcontroller. It will communicate with PC software to perform its work. I am attempting to build a secure firmware update functionality. The PC ...
0
votes
2
answers
2k
views
Hash length vs Data length
I'm very (!) new to the world of cryptography, so pardon me if this question is very basic.
Related to hashing, something that hasn't become clear to me is the relation between data length and hash ...
1
vote
2
answers
2k
views
Parallel file encryption and authentication for large files
For a cloud storage upload client I want to encrypt files during upload, so that they cannot be read by the cloud service provider or anyone who gains access to the account. I would like to use some ...