(or Advanced Encryption Standard), a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.
3
votes
2answers
7k views
How secure is AES-256?
The cipher AES-256 is used among other places in TSL/SSL across the Internet. It's considered among the top ciphers.
In theory it's not crackable since the combinations of keys are massive.
Although ...
3
votes
2answers
185 views
AES - plaintext is smaller 128 bit - how to expaned?
we are currently developing a little AES implementation in a crypto-course at university.
As far as I know, AES uses 128 bit blocklength, so all data that will be encrypted will get split up into ...
3
votes
3answers
821 views
How does the key schedule of Rijndael looks for keysizes other than 128 bit?
It said in Wikipedia that:
[....] Rijndael can be specified with block and key sizes in any multiple of 32 bits, with a minimum of 128 bits. The blocksize has a maximum of 256 bits, but the ...
3
votes
3answers
330 views
Relative merits of AES ECB and CBC modes for securing data at rest
I need to store several million Payment Card Numbers (PCNs) securely in a mainframe database (that is, 'at rest'). I assume that any attacker will have access to all of the stored data.
I assume the ...
3
votes
3answers
470 views
Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
I am developing a symmetric en-/decryption routine written in c# for a database containing user-specific, sensitive information.
I have narrowed down the implementation to 3 different approaches, ...
3
votes
2answers
535 views
Encrypted text length in AES
I have created an application that will be able to read any file and encrypt it using AES Encryption. For efficiency, I am reading a block of data, encrypting it and so on. So for decrypting, I just ...
3
votes
2answers
359 views
Implementing AES in C++: 4x4 Array of unint8_t, or 4x1 array of uint32_t?
I'm implementing AES in C++, and, inspired by the way words are handled in SHA, I decided this time to handle the state as a one dimensional array of 4byte unsigned integers as opposed to a two ...
3
votes
2answers
155 views
Is storing the hash of a key together with ciphertext encrypted with that key secure?
Is it secure to store the hash of a symmetric cipher key along with data encrypted with that key? Are there any circumstances or algorithms in which this combination could lead to potential weaknesses ...
3
votes
1answer
329 views
Advanced Encryption Standard Algorithm Secret Key
just a follow up question with this question..
How does the key schedule of Rijndael looks for keysizes other than 128 bit?
A 256-bit key can still encrypt a block of plaintext in 128 bit?
but in ...
3
votes
2answers
122 views
RSA digital signature vs authenticated cipher
I want to provide both confidentiality and integrity for data at rest (many large files stored on disk).
I plan to encrypt the data using AES, which will cover the confidentiality requirement.
So ...
3
votes
1answer
327 views
AES CCM vs CCMP
Are the terms AES CCM and AES CCMP are equivalent, or is there any technical differences between the two?
3
votes
1answer
323 views
Does the Biclique attack on AES pose a credible risk to its security?
I have heard a lot about the biclique cryptanalysis research on AES, which as far as I know is the closest anyone has got to breaking AES.
Exactly how close did they get? Does this attack propose a ...
3
votes
1answer
413 views
Implementing AES encryption for firmware distribution system
I need to implement an AES encryption for firmware distribution system.
I have a bootloader that can decrypt various AES variants (ECB,CBC,CTR).
When I approached this I found few issues that aren't ...
3
votes
2answers
138 views
Is this streamable combination of encryption and MAC secure?
I want to combine encryption and MAC.
For encryption I use AES-256 with CBC and PKCS5Padding.
For MAC I use HmacSHA512.
I use the Encrypt-then-Mac approach (calculate MAC over the ciphertext and ...
3
votes
1answer
60 views
When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
I'm taking an online class on cryptography at corsera.org / Stanford, and the professor is explaining that it's OK to truncate an AES MAC to $w$ bits as long as $1/2^w$ is still negligible (say $w ...
3
votes
1answer
238 views
On-the-fly computation of AES Round Keys for decryption?
The usual implementation of AES first computes all the Round Keys sequentially starting from the key, and stores them in RAM for later uses. However, when enciphering a single block with a key that ...
3
votes
1answer
112 views
How to communicate authentication tag for GCM?
I have written some code to do AES in GCM. I currently manually append the tag property to the ciphertext, is this the proper way to communicate the authentication tag?
3
votes
1answer
725 views
Does AES-CTR require an IV for any purpose other than distinguishing identical inputs?
I'd like to encrypt files deterministically, such that any users encrypting the same plaintext will use the same key and end up with the same ciphertext. The ciphertext should be private as long as ...
3
votes
1answer
231 views
Is it safe to encrypt a public key alongside a message with AES?
If I have a message M and a public key P, and I encrypt them alongside one another:
CIPHER = AES(M + P, aes_key)
Is CIPHER now weakened if someone knows what P ...
3
votes
1answer
82 views
implementing long term archive encryption
Let's say I want to create private archives for the long term (e.g. more than 30 ). The archives' sizes could be anywhere from 1 GB to 30 GB. As far as I understand I could go down two ways:
The ...
3
votes
1answer
256 views
Is this a good way to encrypt a file?
I need to encrypt a file, distribute it over an insecure channel, and decrypt it later. Using a symmetric-key algorithm. Here's what I intend to do:
Get a password P from the user. Generate a 16-byte ...
3
votes
1answer
209 views
Best choice of finite field for AES on a 4-bit microcontroller?
As the finite field of $GF(2^8)$ are isomorphic to $GF((2^4)^2)$, $GF((2^2)^4)$ and $GF(((2^2)^2)^2)$,
which of the fields is best suited and most efficient for 4-bit MCU and why? Would it be ...
3
votes
2answers
306 views
How were the number of rounds for different key sizes of AES selected?
The number of AES rounds increases with the key length. Why increase the number of rounds at all, and how were these round counts chosen?
3
votes
0answers
96 views
CBC with fixed IV but changing data [duplicate]
Possible Duplicate:
Using CBC with fixed IV
I am using AES in CBC mode.
For some reasons I have some issues for transmiting the IV. So I am using a fixed IV.
If the first 128bits of the ...
2
votes
2answers
230 views
AES with whitening mode
This mode is that each time generate a random number K, xor with plaintext M and the pass the result to AES. My question is that since AES is pseudo random permutation, does AES have the following ...
2
votes
4answers
341 views
Which is more secure using a CSPRNG for a One-time pad, or AES?
In reading about the One-time pad it appears to need truly random key for the pad. Since true random values are not practical to generate this presents a problem (thus making One-time pad less ...
2
votes
2answers
300 views
Capacity of Advanced Encryption Standard in terms of File Encryption
what is the capacity of AES in terms of File Encryption?
is it really good to encrypt a large files in AES? ex. I am encrypting a 8GB of File... is it still good to used AES?
is it still good to used ...
2
votes
2answers
846 views
SHA-256 and AES-128
Does it make an encrypted string more secure if I use SHA256(x) instead of x as the secret key for AES-128 encryption? I do know that SHA-256 produces 64 characters of hashed string regardless of what ...
2
votes
2answers
155 views
Stopping timing attacks on AES: Why is it important to prevent the OS from interrupting the AES computation?
I read the paper Cache-timing attacks on AES (by Daniel J. Bernstein), but I don't seem to understand everything. The author dedicates a long section on how to prevent the OS to interrupt an AES ...
2
votes
2answers
453 views
Is it possible to obtain AES-128 key from a known ciphertext-plaintext pair?
I have a file, which was encrypted with AES-128 in ECB mode. I know the format of the original file and know that all files in this format have the same headers. So, I have an encrypted block and the ...
2
votes
1answer
551 views
What is the difference between these AES encryption methods
I am using AES encryption (Rijindael) with Base-64 encoding in Obj-C and VB. I am currently using the following two projects to achieve this:
Obj-C: ...
2
votes
1answer
1k views
How to solve MixColumns
I can't really understand MixColumns in Advanced Encryption Standard, can anyone help me how to do this?
I found some topic in the internet about MixColumns, but I still have a lot of question to ...
2
votes
2answers
149 views
Is storing original file size in an encrypted file header a bad idea?
I'm encrypting a file using AES-256 in CBC mode. I'm padding to the 16-byte input multiple by using the PKCS#7 limit. The problem I'm currently having is that if I'm transferring or reading the ...
2
votes
2answers
97 views
Does it take brute force to find a pair of plaintext and ciphertext that each follow a certain condition, given an AES encryption key?
Suppose that I have an AES key $K$, and I'm instructed to find a plaintext such that the first 32 bits of the plaintext are some string of bits $S_1$, and the last 32 bits of the ciphertext once the ...
2
votes
2answers
105 views
Does knowledge of original file size provide a cryptographic weakness?
I'm encrypting files using an AES-256 CBC cipher and an SHA-256 HMAC every 64KB in the file. Since AES CBC needs an amount of input bytes to be divisible by 16, I use PKCS#7 padding to bring the ...
2
votes
1answer
94 views
Does the IV need to be known by AES (CBC mode)?
I was thinking about this today and thought I should ask. I think I understand IV's enough to say that they are basically the same thing as Salts when talking about hashes. They are there to improve ...
2
votes
1answer
115 views
Can I use my random IV (for AES) as a salt for PBKDF2?
Also, where do I store my salt (can I just store it at the beginning of the encrypted file)?
2
votes
1answer
2k views
How to use RCON In Key Expansion of 128 Bit Advanced Encryption Standard
I have a question about RCON
here is my illustration...
this is the 128 bit key..
...
2
votes
2answers
246 views
Are there public slow-but-strong algorithms out there that resist brute-force attacks better?
I'm reading that AES uses 4x4 bytes (4*4*8 = 256 bits key) matrix for performances matters (since it's a requirement for common standard encryption algorithms), but are there implementations with ...
2
votes
1answer
110 views
Aes encryption -The relevance of static matrix in mixcolumns operation
Can someone explain to me the relevance of the static matrix used for the mixcolumns operation in aes encryption.i.e the relevance of why the byte is multiplied by 2 + next byte multiplied by 3 + next ...
2
votes
1answer
287 views
Poor man's SSL - is this method as safe as SSL/TLS?
I need to send data between two applications. I've got requirement that says that data should be transmitted using secure protocol such as SSL/TLS. Data is sent using TCP sockets and I don't have ...
2
votes
1answer
1k views
How do I store encrypted files on a web server and decrypt them locally?
I want to store files (images) on a public webserver and let users see them if they know a password. The server shouldn't have the unecrypted files and the server can only serve files, not perform ...
2
votes
1answer
102 views
Can prepending “junk” be equivalent to an IV when encrypting using CBC?
We are encrypting a small positive integer (1-1000) with a constant key using AES256 encryption. We are considering two approaches to make this secure; use an initial vector (which we then need to ...
2
votes
2answers
183 views
Validating successful decryption in AES
I have a program which uses AES-256 in CBC mode to encrypt and decrypt files. As I have quickly realized, AES will even use an incorrect passphrase to decrypt data, which leaves me with no way to ...
2
votes
1answer
142 views
Visualization of cryptography
I think CrypTool is great software. And what I find most useful in it is visualization of algorithms such as Caesar, Vigenere, AES, DES. And my question is: does anyone know other tools which are ...
2
votes
1answer
383 views
Advantage of AES(Rijndael) over Twofish and Serpent
I'm trying to figure out a suitable encryption technique and after reading a bit, I figured the current AES 128-bit encryption is suitable for what I'm trying to do. However, this is more due to the ...
2
votes
1answer
189 views
Is truncating a hashed private key with SHA-1 safe to use as the symmetric key for AES for data at rest?
I realize this is mixing the purposes between asymmetric and symmetric crypto, but I was wondering if it is safe to use a hashed, truncated private key (asymmetric) as the symmetric key for encrypting ...
2
votes
1answer
183 views
Is symmetric encryption vulnerable to plain-text-attacks?
Imagine that Bob sends a message to Alice for symmetric encryption to send to Charlie. (Only Alice and Charlie know the key.) Alice sends the encrypted message back to Bob to send to Charlie. Can Bob ...
2
votes
1answer
303 views
How were the AES key and block length subsets of Rijndael selected?
My intuition tells me it's a trade off between speed and security, but how did the standardisation process select these three seemingly arbitrary key lengths (namely, AES-128, AES-192, AES-256).
2
votes
2answers
214 views
AESManaged Trade Compliance Issue in United States
I am currently using AESManaged encryption for my silverlight application. Does AESManaged encryption have a severe trade compliance issue in Bureau of Industry and Security in terms of shipping the ...
