AES (Advanced Encryption Standard) is a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.

learn more… | top users | synonyms

0
votes
1answer
225 views

Encryption and HMAC in a PSKC file

This is the PSKC standard https://tools.ietf.org/rfc/rfc6030.txt In Section 6.1 6.1. Encryption Based on Pre-Shared Keys They have the following ...
0
votes
1answer
47 views

if using cbc+hmac dealing with small size of data(less than 128bit) , will it cause any problem?

if use AES-cbc,HMAC-SHA256, and there is some txt needed to be enc, and I divide this txt into small packages with variable length, then enc them. some of these package can be less than 128bit. Is ...
0
votes
1answer
100 views

Best practices (if any) to add metadata to encrypted files

I am encrypting files using AES/CBC/PKCSPadding, with 256 bits long keys. So far the first 16 bytes of each encrypted file are the IV. I would like to store some more information regarding the ...
0
votes
1answer
306 views

Storing AES encrypted RSA private keys on a server

I'm thinking about creating an encrypted messaging web application where users create RSA key pairs, they store the public key on the server for others to see and also store an AES encrypted private ...
0
votes
1answer
123 views

AES: Changing plaintext to state

Can someone explain this to me? For example how M chanes to 0c? Changing plaintext to state:
0
votes
1answer
100 views

Is AES's parity key-dependent?

Is the parity of the permutation of the set $\{0,1\}^{128}$, defined by AES encryption for a certain fixed key, dependent on this key? DES, and any pure Feistel cipher, has even parity for any key. ...
0
votes
1answer
128 views

Encrypting twice with different modes?

I was using a SOCKS5 proxy today (tunneled through SSH) and I began to wonder what the effect of encrypting twice (TLS over encrypted SOCKS5 in this case) would have on the security of the transmitted ...
0
votes
2answers
122 views

AES: Guess Password using the unencrypted text?

I am using the same password for some encrypted files currently (I know this is bad practice, though), and I wonder whether an attacker could decrypt if one decrypted file fell into his hands.
0
votes
1answer
243 views

Fast AES-128 on 32 bits encryption

Suppose in AES-128, there are $5$ tables, namely Te0, Te1, Te2, Te3, Te0 which help in fast encryption on $32$ bits CPU. Each table contains 256 numbers, where each number is $4$ bytes. Te4's ...
0
votes
1answer
97 views

About S-box in AES

I am working on AES. Can we expand $s(a \oplus b)$ in terms of $s(a)$ and $s(b)$ where $a$ and $b$ are two eight bit inputs and $s(a)$ is the S-box value of $a$?
0
votes
1answer
120 views

AES CBC encoding of decomposable OAuth2 tokens

We're building a stateless RESTful API that relies on the content of OAuth2 tokens to identify users and what they have access to. Users authenticate with other means and are given a token, which they ...
0
votes
1answer
173 views

Is AES a linear hash?

So, having read a variety of documentations on AES encryption, I came to the unknowledgeable conclusion that the key schedule applied to the array of chunks, and not just the 14 cycles on a single ...
0
votes
2answers
802 views

Deriving HMAC key and cipher key from passphrase? [duplicate]

I'm encrypting a file with AES-256 in CBC mode. I needed to add an HMAC for authentication and validation of the file contents and passphrase, so I used a SHA-256 HMAC over chunks of my file ...
0
votes
0answers
8 views

Does we need IV if we're generating a new Symmetric key for every message? [duplicate]

We need to encrypt individual messages, for every message we: Generate a new AES key Encrypt the message with the key (AES/CBC/PKCS5Padding) Encrypt the symmetric key with with a public key ...
0
votes
0answers
5 views

Length of output of AES 128 encryption in python [migrated]

When I am trying to convert to hex the output of my AES 128 encryption code using pycrypto. I am using hexlify .the output is 64 bits for a 32 bits input. The output is always double the size for any ...
0
votes
1answer
37 views

Problems implementing AES in CBC+CTS mode

I'm trying to implement an AES cipher in CBC+CTS mode, but I'm unable to get the second last plaintext block to decrypt properly. I've attached my code, it's based on the steps listed under CBC ...
0
votes
0answers
79 views

Is this a secure method of encrypting with authentication?

My goal is to allow two clients to send files securely over an untrusted network without the need for more than one block of information to be sent. Both clients have ECDSA keys of size 256 bits. I'd ...
0
votes
0answers
37 views

Side channel attack on FPGA AES engine

I actually don't know if this is the right place where ask, but I try. The side channel attacks aren't a negligible problem. There are several ways to protect from these attacks its own IP inside the ...
0
votes
0answers
51 views

Unicity Distance - AES

I am quite confused calculating the unicity distance and I was hoping that someone can clarify some things for me. My main issue comes from somewhat a difference of the calculation given by our ...
0
votes
0answers
60 views

How many bits of entropy can I expect from /dev/urandom in iOS?

Apple's latest security documentation indicates that it now uses CTR_DRBG for generating pseudo-random numbers (previously Yarrow instead of CTR_DRBG), using "timing variations during boot" and ...
0
votes
0answers
20 views

RFC 5297 implementation [duplicate]

I am looking for an implementation of RFC 5297 algorithm using javascript. I would like to see how to wrap a key on client side web browser, like Mozilla's fxa-auth-client (That uses a xor to wrap) ...
0
votes
0answers
59 views

side channel attacks against TDES (compared to AES)

We all know AES has some pretty strong side channel attacks, some where (with a couple of hundred know plain- and ciphertext combinations) a key can be derived in a matter of minutes. Others may take ...
0
votes
0answers
26 views

AES-XTS: find key from ciphertext and plaintext [duplicate]

Let's say I have a plaintext, the corresponding ciphertext encrypted using AES-XTS, and the initialization vectors. Is there any way - not brute force, of course - to compute the key? Even if there's ...
0
votes
0answers
37 views

AES product function

Small description: consider a polynomial in GF($2^8$) , which has the form $$f(x) = b_7x^7 + b6x^6 + b_{5}x^5 + b_4x^4 + b_3x^3 + b_2x^2 + b_1x + b_0 $$ If we multiply by x , we have $$x * f(x) = ...
0
votes
0answers
73 views

About the Security of PCBC Encryption Mode

We are designing an encrypted file system. We plan to use the PCBC (Plaintext Cipher Block Chaining) encryption mode for encryption. This is because we desire the feature ("small changes in the ...
0
votes
0answers
74 views

How dangerous is it to encrypt with AES 256 if the end user knows the unencrypted value?

I am implementing a bit of security in a system that was originally built without encryption on a specific piece of data. The plan was to encrypt this piece of data and include it as part of the ...
0
votes
0answers
50 views

Requested to encrypt data with AES256, digital certification, timestamped

at my job we have been tasked by gov to encrypt some data we send to them. The "law" says we have to do the title above, but they only need us to do the AES256 thing because the data is not really ...
0
votes
1answer
259 views

decrypt a saml 2.0 response having aes 128 and rsa [closed]

I need to decrypt a saml 2.0 response. But, the response object has reference to aes 128 and rsa algorithms, and I am having hard time in finding a way to decrypt. Below is the structure of the ...
0
votes
0answers
38 views

AES mode scheme feedback [duplicate]

I've been studying encryption on a hobby basis, and wanted to know if I got this basic cypher construction right (this is another experiment, see the AES ECB experiment thread earlier). Encryption: ...
0
votes
0answers
82 views

Affine transformation in finite field SubBytes

Can anyone please explain how this computation was done? I picked it up from How are the AES S-Boxes calculated? The affine transformation is as follows. The input bits are multiplied against the ...
0
votes
1answer
60 views

Is the key deducible with AES CTR when we know about the plaintext, IV and the ciphertext? [duplicate]

Simply as stated, with AES running in CTR mode, can somebody work out the key (without brute-forcing) given we know about the plaintext, IV and also the ciphertext. Assuming we also know about the ...
0
votes
3answers
78 views

private keys for multiple devices [closed]

I have an architecture where: a user can have multiple devices (phones) the server needs to broadcast the payload to all devices through the same channel (basically, all devices listen and receive ...
0
votes
0answers
108 views

Generate CA with aes256 passphrase protected DSA key

I want to create my own Certificate Authority with an DSA key. I figured out to create it with: ...
0
votes
0answers
73 views

Find LFSR with Berlekamp-Massey algorithm?

in the paper "A Compact Rijndael Hardware Architecture with S-Box Optimization" (http://link.springer.com/chapter/10.1007%2F3-540-45682-1_15) at page 6 figure 3, i think they constructed a LFSR for ...
0
votes
1answer
93 views

AES - Encrypting multiple blocks of files

On my site, users can download files which are stored on public hosting, so I need to encrypt them. A downloaded file is divided into blocks of 1 kB and I want encrypt them individually, using the ...
0
votes
1answer
417 views

Java: How to handle authenticated encryption for big files

First I need to mention that I can't use BouncyCastle to implement this solution. I have to encrypt files into the file system. Those files are not going to be tranfered over the wire to any other ...
0
votes
0answers
95 views

Importance of ShiftRows in AES

If ShiftRows is excluded from AES, then an attacker can attack the modified AES by simply treating $128$-bit input as $4$ $32$-bits blocks. The attacker can attack these $4$ blocks separately. ...
0
votes
0answers
95 views

CCA security of a system that splits messages and encrypts each packet

Propose a symmetric key based crypto-system for implementing a secure email system. This system is based on AES and CCA secure. Suppose that you have to encrypt a large message and that this message ...
0
votes
1answer
76 views

Storing salts and iteration number?

I have a function that derives two sub-keys from one passphrase using PBKDF2 one which is used as a encryption key the other for HMAC generation, because these two sub-keys will need to be regenerated ...
0
votes
0answers
81 views

side channel attacks on AES

Say you have a web application that's performing AES encryption. What sorts of side channel attacks should one keep an eye out for? Timing attacks affect RSA more than symmetric ciphers in-so-far as ...
0
votes
1answer
116 views

Session based AES with random key and static salt

I'm currently using aes to encrypt/decrypt messages to and from a web service. When the user establishes a session he sends a random generated secret via rsa public key. This secret is used to ...
0
votes
0answers
61 views

AES/CBC fixed Initial vector use-case [duplicate]

I am using AES/CBC to encrypt my http cookie. I never encrypt the same cookie value twice so my understanding is I don't need to use a random initial vector - using a fixed initial vector is fine for ...
0
votes
0answers
44 views

NIST Standard for Advanced Encryption Standard Algorithm [duplicate]

Possible Duplicate: Advantage of AES(Rijndael) over Twofish and Serpent What is the reason of NIST why Rijndael choose as the Advanced Encryption Standard
0
votes
2answers
165 views

How secure is it to use password as AES key?

I am developing a steganography app where user encrypt any file into an audio file. The user can enter a password to protect the hidden data. The same password is converted as a 256 bit key and the ...
0
votes
1answer
123 views

Why is there an extra block when encrypting?

I am passing input data 20 bytes long and java AES-CBC returns 48 bytes instead of 32 which is what I think it should output because of padding. My key is 16 bytes long. ...
-1
votes
3answers
507 views

how much is secure to encrypt a password using itself (as encryption key) for storing it on a unsecure media?

I want to store a password securely on a storage (suppose in a usual unencrypted file). I use this password as AES key to encrypt itself (using AES-ECB) & then store it on the media (the password ...
-1
votes
4answers
534 views

Secure way to encrypt and decrypt a folder on Mac or Linux? [closed]

I am looking for a way to securely encrypt files on Mac and Debian. OpenSSL comes pre-installed on Mac OSX and Debian/Ubuntu. Therefore, is this a safe/recommended way of encrypting individual files? ...
-1
votes
1answer
540 views

Is the random data at the end of my decrypted message supposed to be there?

This is my PKCS#5 & AES/ECB Python 3.3 code: ...
-1
votes
1answer
50 views

Safe way to generate different encrypted output from the “same” plaintext

Imagine I want to send imaginary defcon levels to another party over the internet. I know there are good protocols for this like SSL, but lets say I only have a blackbox tool where I can input an AES ...
-1
votes
1answer
72 views

Error propogation in CBC mode

Going through the wiki for modes of operation I see that the section error propogation says that an error in one block in the ciphertext in CBC mode only impacts two blocks. I do not quite get that. ...