AES (Advanced Encryption Standard) is a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.

learn more… | top users | synonyms

2
votes
0answers
13 views

Is order of Correlation Immunity of AES S_box Zero?

I am working on AES S_box and trying to find out its properties like Correlation Immunity, Balancedness , Algebraic Degree , ANF form etc. These Papers 1, 2 give a nice definitions to above said ...
1
vote
0answers
19 views

How long is the tag T in AES-GCM(Or: Can implementations freely choose t = len(T)?) [duplicate]

I've started to learn about GCM. In the paper I read on page 4 there is the equation: $$ T = \text{MSB}_t(\text{GHASH}(H, A, C) \oplus E(K, Y_0)) $$ It's clear to me that the function $\text{MSB}_t(S)...
2
votes
1answer
51 views

When is AES chosen instead of a stream Cipher (e.g., RC4) during an SSL connection?

During an SSL handshake, the browser sends a list of cipher suites to the server, from which the server selects one option. For data encryption, two of the several possibilities for the ciphers in ...
-1
votes
1answer
68 views

How to calculate this binary operation? [closed]

I found this binary operation, however It is the first time that I found this operator '.' : That is the equation: 02 • 63 = 00000010 • 01100011 = 11000110 I don't understand how 0 • 0=1 I ...
5
votes
2answers
90 views

Is the difference distribution table of AES S-box uniform?

I am studying about various block ciphers and their weaknesses, so I have a doubt about AES S-boxes, Is the difference distribution table of AES uniform ?
4
votes
1answer
77 views

How does one practically calculate the non-linearity of a multi-output boolean function like the AES s-box?

I am working on multi-output boolean function i.e. a function that takes an $n$-bit input and gives an $m$-bit output for all possible inputs (i.e. $2^n$ inputs). To be more exact: I am trying to do ...
0
votes
0answers
25 views

openssl AES, cannot decrypt with java [closed]

i'm using openssl to encrypt some data, which will decrypted with an java serverlet. Server isn't under my control, so i cannot install/modify anything on it. The question is how i can encrypt AES ...
0
votes
0answers
20 views

Do I need output buffer to be multiple of AES block size for CTR mode? [migrated]

In my C code, I use OpenSSL's AES in CTR mode for encryption via EVP interface, that is I have something like this: ...
3
votes
3answers
1k views

RSA digital signature vs authenticated cipher

I want to provide both confidentiality and integrity for data at rest (many large files stored on disk). I plan to encrypt the data using AES, which will cover the confidentiality requirement. So ...
1
vote
1answer
64 views

How was the AES MixColumns matrix constructed?

How was the constant matrix in AES MixColumns constructed? \begin{bmatrix} 02 & 03 & 01 & 01 \\ 01 & 02 & 03 & 01 \\ 01 & 01 & 02 & 03 \\ 03 & 01 & 01 &...
3
votes
4answers
16k views

Where i can find an AES implementation in python? [closed]

Where i can find a "reviewed" version of AES implementation in python. Not an API like PyCrypto whereby you can call AES algorithms in a single line.
6
votes
1answer
163 views

Least-weak way to authenticate using only AES ECB/CBC

I have an embedded application that needs to occasionally get secure updates from a server. The only crypto library I have available for the chip is an AES-256 cipher (ECB and CBC, encrypt/decrypt). ...
0
votes
1answer
48 views

Given a sequence of integers, would applying AES encryption to the sequence produce a unique set of strings?

Let us say that we take a sequence of the integers from a to a+n-1: (a, a+1, a+2, a+n-1), ...
7
votes
1answer
73 views

AES sbox security issue - power analysis attack?

I was wondering about whether the usage of a precomputed sbox (kind of a lookup table) could be a serious security issue when using AES. I am new to power analysis attacks, so it is hard to ...
0
votes
1answer
87 views

Key exchange problem

I've found the following problem in one of my courses. Any tips on how to solve this would be appreciated! Alice has the key pair $(pka,ska)$. Bob has the pair keys $(pkb,skb)$. They want to ...
1
vote
1answer
118 views

Encrypting and Authenticating The Simplex Communication Between Embedded Devices

I am planning to build temperature sensor nodes for my home heater control. Central device will control the heater using temperature data read by nodes. These nodes will send temperature data to ...
-1
votes
1answer
25 views

GIven Unencrypted and encrypted data (AES-GCM) both, is it possible to calculate the Chiper key of AES-GCM [duplicate]

Sorry for a simple curiosity, Given Unencrypted and encrypted data (AES-GCM) both, is it possible to calculate the Chiper key of AES-GCM ?
3
votes
1answer
83 views

How can I create pre-determined encrypted results?

I want my encryption results to be the lyrics to Star Spangled Banner. The original text I'm encrypting would be, for instance, the menu to a local pizza place. I know what I want my passphrase to be. ...
1
vote
1answer
48 views

AES Key Generation based on database guid

I am developing a .NET application spanning multiple servers who should all be able to decrypt data stored in a SQL database. My database is multi-company where each company has its own GUID. since ...
8
votes
1answer
104 views

How to calculate active s-boxes from branch number?

If MDS in AES has branch number 5 (so 5 active s-boxes in 2 rounds), wouldn't that mean 4 rounds of AES has $5*2=10$ active s-boxes? AES paper says it has 25 ($5^2$?) active s-boxes in 4 rounds. How ...
4
votes
2answers
425 views

Key recovery when AES ECB is used for short but repeated messages

My question is based on the specification of the protocol LoRaWAN and especially on the part 6.2.5 Join-accept message. It is said that the join-accept message is encrypted using AES ECB. This is (...
8
votes
1answer
158 views

Where is the key in white-box AES cryptography?

After an initial study of white-box cryptography, specially around the first article (Chow et. al.), I understood each step of transforming the lookup tables of AES into new ones. If I understood it ...
3
votes
1answer
51 views

What is the LENGTH parameter in EEA2?

In the EEA2 option for encryption in LTE the AES-128 algorithm is mechanized. There, the nonce used in the CTR Mode is a 128-bit value. The first 64-bits are covered by a COUNTER, a BEARER, a ...
0
votes
0answers
15 views

How to set M parameter for frequency test within a block

I am using statistical tests to determine whether a sequence of bit is random, one of them is frequency test within a block. In a nutshell: Within a block of M a number of 1 is counted. A joined ...
0
votes
0answers
14 views

how do i incorporate AES encryption into a text encryption hta in the form of a batch file? [migrated]

i made an hta app and a few batch file encrypters and decrypters used in the hta for encrypting text. how can i incorporate AES encryption into my hta? i would like to have an AES encryption function ...
0
votes
3answers
384 views

CTR HMAC SHA256 implementation

After trying to invent my own AES mode, I decided to just implement something that's known to work, namely CTR with HMAC SHA256. From what I understand, I can use the IV as a counter, and the IV ...
7
votes
1answer
5k views

How long does it take a quantum computer to brute force AES?

I understand that using Grover's algorithm it only requires $2^{64}$ lookups for a 128 bit AES encryption, leading people to say we need to increase to 256 bit keys. But how long would it actually ...
4
votes
0answers
65 views

Does changing the order of the steps within a round affect the security of AES?

I was trying to understand the internal structure of AES (Advanced Encryption Standard) Standard order of steps within a round: Substitute Bytes Shift Rows Mix Columns Add Round Key Substitute ...
0
votes
2answers
75 views

What makes an open source encryption algorithm safe?

Take for example the popular AES algorithm where we have a combination of substitution, shift row, mix column, and add key steps involved in encrypting plain test. All of the mathematical operations ...
3
votes
1answer
140 views

Is the use of AES in LoRaWAN correct?

I'm reading about LoRaWAN (specification). This network protocol has a particular way to encrypt data, detailed in the part 4.3.3.1. Here is a recap of how the encryption work, as I understood it. ...
5
votes
1answer
104 views

Nonce for AES GCM to prevent replay attacks

I am wanting to encrypt a message with a pre shared key that uses AES GCM from the OpenSSL library to do so. I generate my key for the AES crypto via hashing my pre shared key with a salt using the <...
2
votes
1answer
44 views

what kind of custom header add to encrypted file to identify my encryption,consider safe and reliable.like pseudo format extension or file size

I want to add some custom header to encrypted file to identify my encryption,consider safe and reliable.like pseudo format extension or file size.Is there any algorithm or tool to make it?
1
vote
2answers
58 views

AES encryption for pairwise identifiers

I'd like to map a random ID of 16 bytes (sourceID) to another random ID of 16 bytes (targetID). The operation should: only be reversible by me be deterministic There are about 1 million source ...
-3
votes
1answer
65 views

bruteforce on aes 256 cbc mode

i have a series of encrypted text , they encrypted by aes 256 bit cbc mode for every encrypted text there is an iv that i have them also and i know its algorithm is aes 256 bit cbc mode i can ...
3
votes
2answers
151 views

Should I add randomness at the end before AES?

Seen AES, changing a character drastically affects the encrypted text. I want to make it harder to decrypt AES I send. So, it seems this can be done by adding some special code and some random bytes <...
2
votes
1answer
93 views

Is this a proper key-exchange implementation?

I've been trying to implement Diffie Hellman key exchange so far from my own understandings (I know I could just stick with SSL/TLS, but I want to understand it in depth more), so I created this basic ...
8
votes
3answers
303 views

How secure is AES-256, but with an effective key length of 56-bits?

I need to encrypt a few drives using Kaspersky Total Security. I however noted something peculiar, Kaspersky's description of their cipher is: Data will be protected using AES-256 encryption ...
5
votes
1answer
81 views

How do Käsper and Schwabe's Bitsliced AES Mixcolumns work?

The only way I see it possible to do the matrix-multiplication in the MixColumns operation of AES is by shifting the bits in the multiplied number, and then reduce with the polynomial if needed. ...
0
votes
0answers
29 views

correlation between the timing data produced by different keys with similar inputs in AES

Is there or can there be any correlation between the timing data produced by different keys with similar inputs in AES? If yes, what type of correlation?
2
votes
6answers
2k views

How secure will this be against brute-force attacks?

I'm looking into encrypting files like this: First, I SHA-1 hash the password. Let's say the password is something normal like "hello123", and then hashed. Then I encrypt a file using this: ...
7
votes
4answers
5k views

Why is AES not a Feistel cipher?

I am studying for an exam right now. And I wanted to make sure I got this point correct. AES is not a Feistel cipher because the operations in AES are not invertible. Is the above statement correct?...
2
votes
2answers
1k views

Am I understanding AES key padding correctly?

I’ld like to ensure I understand AES key padding correctly… Is the initial AES key (expanded to the key schedule) byte padded if less than e.g. 16 bytes? Is there a safe way of determining if ...
0
votes
2answers
2k views

If I can crack the AES, how do I crack the wifi [closed]

I am a student major in math. My teacher said that AES (Advanced Encryption Standard) has many applications. For example, the WPA2 in wifi. Then he taught the theory of the AES and never says how to ...
5
votes
0answers
63 views

Increase in AES SBox

AES uses one single Sbox to substitute all 16 bytes in one Round. Will using 16 different Sboxes (with cryptographic properties similar to AES Sbox i.e Non-Linearity of 112, Differential probability ...
8
votes
2answers
2k views

On-the-fly computation of AES Round Keys for decryption?

The usual implementation of AES first computes all the Round Keys sequentially starting from the key, and stores them in RAM for later uses. However, when enciphering a single block with a key that ...
0
votes
3answers
113 views

How can complexity be increased or decreased in AES?

I have been studying data compression for a while. For educational purposes, after a lot of reading, I managed to create a software that performs encryption and authentication using AES256-GCM. ...
0
votes
0answers
33 views

How are the coefficients of the polynomial used in Mix Column stage of AES chosen?

In the book (Cryptography, Theory and Practice by William Stallings), it states: the coefficients of the matrix are based on a linear code with maximal distance between the code words, which ...
4
votes
1answer
73 views

Number of Sbox in a Cipher

Camellia has 4 SBOX and so does the TwoFish(key dependent 4 Sboxes). Where as AES uses only one. Would it have made AES more secure if AES had 4 or more SBOX too? Does using more Sbox with similar ...
5
votes
1answer
484 views

For a given plaintext-ciphertext pair, how many valid AES keys are there?

For $PT\in \mathbb{M}$ and $CT\in \mathbb{C}$, let $\mathbb{F}=\{f|f:\mathbb{M}\rightarrow\mathbb{C}\}$ be the collection of all functions from $\mathbb{M}$ to $\mathbb{C}$. Then AES encryption under ...
5
votes
1answer
79 views

AES with shuffleBytes instead of shiftRows

I was examining how AES provides diffusion and noticed that indices of the shiftRows transposition step can be modeled as inputs/outputs of a 4x4 table: ...