(or Advanced Encryption Standard), a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.
2
votes
2answers
214 views
AESManaged Trade Compliance Issue in United States
I am currently using AESManaged encryption for my silverlight application. Does AESManaged encryption have a severe trade compliance issue in Bureau of Industry and Security in terms of shipping the ...
2
votes
1answer
131 views
Winzip AES256 vs PGP
If I use the AES256 option in Winzip to encrypt a file, is it any less safe or less secure than using pgp encryption?
2
votes
1answer
250 views
Is AES-256 a post-quantum secure cipher or not?
We know Grover's algorithm speedup brute-force attacks two time faster in block ciphers (e.g brute-forcing 128 bit keys take $2^{64}$ operations not $2^{128}$).
That explains why we are using 256 bit ...
2
votes
1answer
700 views
AES vs Blowfish taking key-length into account
I understand that Blowfish is getting old, but is still a secure algorithm, and that AES is very popular, and is recommended by most people. My question is, how do the two compare when a 256-bit key ...
2
votes
1answer
75 views
Security implications of using constant string to verify AES key?
I know that you can use for example CBC-MAC to verify data integrity and thus the password upon decryption.
But would there be security implications of just adding a constant string to the plaintext ...
2
votes
1answer
144 views
Signing 14 bytes of data
for an embedded device I need to sign a 14-byte string and want to verify that string on the device.
Since there is already an AES-Library on the device, I thought about using the following scheme:
...
2
votes
1answer
798 views
In which order are the round keys used during AES decryption?
In the Add Round Key step in AES decryption, which part of the expanded key will I XOR first to the result of the SubBytes step?
Is it the 10th round key?
For example, is this the right order?
...
2
votes
1answer
630 views
AES-NI implementation examples
Newer Intel and AMD processors have hardware support for implementing AES using the instruction set AES-NI (instructions AESENC, AESKEYGENASSIST etc). Do you know of any clean example implementation ...
2
votes
1answer
315 views
Shortcuts / practicality of brute forcing block cipher (AES) + ECB with known plaintext
I know the plaintext (26 bytes long) and cryptotext of block cipher (suspected to be AES) in ECB mode. I can generate hundreds or thousands of such samples, but the samples are not arbitrary. What are ...
2
votes
1answer
308 views
Is there a standard for OpenSSL-interoperable AES encryption?
Many AES-encrypted things (files, strings, database entries, etc.) start with "Salted__" ("U2FsdGVkX1" in base64).
I hear it's some sort of OpenSSL interoperability thing a b c.
Is there some ...
2
votes
2answers
523 views
Using an RSA private key simultanously as an AES encryption key to generate random numbers?
Currently I'm implementing a PRNG for an embedded system. Using the RFC 4086 I've decided to use the X9.17 - to be more specific the succesor X9.31- standard to implement my PRNG. X9.17 uses DES, but ...
2
votes
0answers
110 views
Single-purpose symmetric encryption scheme for single files
I'm writing a simple password manager program that will encrypt/decrypt a single file (it's size will most likely stay under a few K). This is my initial file format design:
...
2
votes
0answers
77 views
Implementing PKCS#7 Padding on a Stream of Unknown Length?
I have a fairly simple Python program using PyCrypto to use AES+CBC to encrypt a stream of input. In order to adhere to the 16-byte input size multiple, I've implemented PKCS#7 by hand. (While I know ...
1
vote
3answers
466 views
Is AES really used for Top Secret stuff?
I've read almost everywhere that AES-256 can be used for Top Secret material (in the US). Is it really used or is it some kind of decoy to hide the more advanced algorithm they might use ?
1
vote
2answers
182 views
Secure Hash Function based on AES
How secure would a hash function be which appends an extra block of 16 zeroed out bytes to the end of the message and then AES-encrypts it with a well-known password (say the first 128 bits of pi) ...
1
vote
2answers
231 views
AES key padding
Is the initial AES key (expanded to the key schedule) byte padded if less than e.g. 16 bytes?
Is there a safe way of determining if decryption was successful (i.e. used the correct key)?
1
vote
1answer
119 views
AES Message Authentication Vulnerability
My securities instructor recently posed this question to the class and I am bending my brain in half trying to figure it out.
Suppose $y_1 = AES(K, x_1)$ and $y_2 = AES(K,x_2)$, and suppose you ...
1
vote
1answer
100 views
How can encryption software accept password lengths which are not one of the AES key lengths?
AES comes with key sizes of 128, 192, and 256 bit.
But in Truecrypt or other crypto software we can use passwords of different length, even less than 128 bit or more than 256 bit.
How is this ...
1
vote
4answers
362 views
How easily could this be cracked?
I'm looking into encrypting files like this: First, I SHA-1 hash the password. Let's say the password is something normal like "hello123", and then hashed. Then I encrypt a file using this:
...
1
vote
3answers
744 views
Does encrypting twice using the same block cipher produce a security weakness?
If I use the output of a cipher, for example a block cipher such as AES and encrypt it again with the same algorithm, I read that this introduces weaknesses into the overall security of the system.
...
1
vote
2answers
148 views
Is it worth applying a MAC on data in a HSM?
I'm building a basic HSM out of an Arduino, and am using the following scheme to store data:
Master symmetric key $k_m$ stored in firmware (secure bit set to prevent trivial extraction).
Secondary ...
1
vote
2answers
123 views
risk of attacker decrypting RSA ciphertext without public or private key
As I describe in my previous question I am trying to decide if it's worth it for me to use the Offline Private Key Protocol in creating some long term private archives, instead of just going with a ...
1
vote
2answers
251 views
AES+CTR+HMAC Encryption and Authentication on an Arduino
In my project we would like to encrypt and authenticate the the communication channel between our server and our Arduino nodes, which relies on an underlying TCP channel.
We have chosen AES in CTR ...
1
vote
1answer
395 views
AES CBC mode or AES CTR mode recommended?
what's benefits and disadvantages of CBC vs CTR ? which one is more secure ?
1
vote
1answer
401 views
1
vote
2answers
1k views
Initialization vector length insufficient in AES
I use AES with AES/CBC/PKCS5Padding with the following encryption and decryption code sections in Java:
...
1
vote
1answer
1k views
Cipher Feedback Mode
I can't understand what CFB really is. It said in Wikipedia that CFB is same as CBC, but I find that CFB is more difficult than CBC.
Can someone explain to me how CFB works. Such as how ...
1
vote
3answers
66 views
OpenSSL AES 256-bit Key Management
I am using C and OpenSSL to encrypt files. After experimenting with the OpenSSL command line utility, it makes you enter a passphrase that can be any length, but uses that to create a 256-bit key.
...
1
vote
2answers
57 views
IV Security Clarification
After doing lots of reading on SO and other websites relating to AES cryptography, I am trying to understand the security issues surrounding IV's.
There seems to be a lot of confusion and ...
1
vote
1answer
89 views
How insecure in practice?
I am in attempt to understand relative insecurity of certain encryption schemes. Particularly of interest is DES and RC2. I know AES is better and should be used to encrypt. But practically, if ...
1
vote
1answer
88 views
How to verify a shared secret using only AES?
I have two devices that need to verify that they both are in possesion of the same secret key. One of the devices is a very limited embedded device that only has AES128 available, no SHA or other hash ...
1
vote
1answer
126 views
How much data can I encrypt with AES before I need to change the key in CBC mode?
In my cryptography class, the instructor suggested that in order to give the attacker a minimal advantage of $1/2^{32}$, we have to change the key after $2^{48}$ blocks are encrypted.
It seems that ...
1
vote
2answers
240 views
Would a “Triple AES” (in the sense of how Triple Des works) serve for a dramatic increase in safety?
The system requires to be as paranoid as possible regarding security. One of the few contemplated changes to the current design is to use multiple encryption. First proposal was to use Serpent on top ...
1
vote
2answers
271 views
is AES secure for java application licensing
I have to license a java application and want to code a quick implementation, the scheme I came up with is:
1) The Application calculates a string X which we assume to be the md5 sum of the ...
1
vote
1answer
175 views
Use of CBC-AES-256 to encrypt usernames
I came across some code in our project that encrypts usernames (limited to 50 chars, most are less than 10) using the following parameters:
IV size is 16 bytes
Key size is 32 bytes
Algorithm is ...
1
vote
1answer
54 views
Two files encrypted with related data versus one file
I have some code that takes a list of credit-card numbers, splits the number into two chunks, one chunk is 8 characters long, the other chunk is the remainder.
Each series of chunks is saved into ...
1
vote
2answers
342 views
Where i can find an AES implementation in python?
Where i can find a "reviewed" version of AES implementation in python. Not an API like PyCrypto whereby you can call AES algorithms in a single line.
1
vote
2answers
203 views
Can one build a one-way function from AES?
We change the AES block cipher encryption:
we delete the key schedule algorithm
the user now provides a string of 1408 bits
we divide the string to 11 sub keys, and use them directly in the ...
1
vote
2answers
440 views
Is AES in CBC mode secure if a known and/or fixed IV is used?
I have a need to encrypt credentials for a third-party app used by a secured internal app. Over on ITSec.SE, I was helpfully shown a scheme to encrypt the third-party credentials based on a hash of ...
1
vote
1answer
333 views
AES GCM implementation in c#
I am implementing an AES cipher in GCM mode in c# and have a few questions. My code is based on the code found here for reference. I'll copy in the relevant portions.
...
1
vote
1answer
122 views
Encrypt a single file, chunk-by-chunk, each chunk using different key (AES)
Encrypt a single file, chunk-by-chunk, each chunk using different key.
I am a security newbie (only took 2 security courses before)
But currently I am using this encryption method for my Android ...
1
vote
1answer
111 views
Proper uses for CTR and CBC AES block cipher modes
Assuming the following:
Key is randomly generated is being used (32 bytes+)
IV is also randomly generated
Crypto random key generator is used
Data being encrypted contains common bytes like ...
1
vote
1answer
91 views
Partial decryption of large file in AES-GCM (or other modes)?
Lets assume
a 4gig file that is internally made of 1 million pages of 4k bytes each (page).
the file was originally AES-GCM encrypted
these pages (or entire file) lives across the internet i.e. ...
1
vote
1answer
105 views
Is this method for exchanging private key using RSA sound?
Bob know's Alice's public key, and he wants to make sure he's connecting to the one which has that key. Furthermore, Alice wants to verify when she gets a connection from Bob who'll give his public ...
1
vote
1answer
145 views
AES key/ciphertext space sizes
This is giving me a brain ache now... If I have AES-128, block is 128 bit, then every plaintext (128-bit) can be encrypted to some ciphertext that is also 128-bit. This is the block size. But: 128-bit ...
1
vote
1answer
1k views
How to decrypt AES in CBC
i am having problems understanding how CBC works! I know that it is a chain and the IV is XORed with the PT but then what? I mean we encrypt it with key k and the result is the CT which we use for the ...
1
vote
1answer
70 views
Counter Mode: static IV but different keys [duplicate]
Given we are using AES counter mode, suppose we randomly generate several keys, all of them are using same IV (say, zeros). Does this lead to any security issue?
I know that in CTR mode, same key-iv ...
1
vote
1answer
132 views
How to choose between AES-CCM and AES-GCM for storage volume encryption
We are using the encryption built into Solaris 11 ZFS, which offers the choice between CCM (CBC counter mode) and GCM (Galois counter mode). What are the pros and cons of choosing each of these cipher ...
1
vote
1answer
128 views
Decryption a chunk of file with AES
We are having a requirement to store large files (~1GB) encrypted and decrypt them when reading. We are looking to use AES-CTR or AES-GCM mode to encrypt the data. There are scenarios where we want to ...
1
vote
1answer
102 views
Understanding padding oracles - is an attack plausible in my scenario?
I have a scheme that, long story short, uses AES in CBC mode to encrypt third-party credentials for user accounts with a password-derived key. It's been mentioned that the use of CBC mode is a ...
