Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
3
votes
2answers
76 views
GPG and PAR2 error correction data from the plain archive, will it compromise security?
I have the following scenario:
Archives compressed with 7z, hundreds of MiB in size
GPG to encrypt the archives (binary, without ASCII armor)
PAR2 to create error correction data
Question
1. ...
2
votes
3answers
144 views
Is there a way to use Shamir Secret Sharing with updatable data?
I want to divide a system that maintains these properties, based on Shamir's Secret Sharing:
A secret key is split up to N pieces, where T of them are enough to reconstruct the key.
The original key ...
2
votes
0answers
72 views
How can I prove that this encryption scheme from a random oracle is secure?
I am reading this example:
A random oracle is an ideal object.
What makes a random oracle convenient for proofs is the part about knowing nothing on the output for a given input if you do not ...
2
votes
2answers
151 views
Assymetric password encryption - Viable? Which algorithm?
We have an application that requires cleartext passwords for user authentication because of the authentication mechanism in use (RADIUS/CHAP), which unfortunately we cannot change. Since we don't want ...
0
votes
2answers
75 views
ElGamal: Generation of “g” value?
I haven't been able to find a clear explanation on this (and I'm probably just confused in general). I have the following parameters of ElGamal signatures:
$p$ = safe prime
$q = (p-1)/2$
$g$ = an ...
2
votes
1answer
74 views
Why unit vectors should be encrypted bit per bit in that case?
At this work at section $2.2$ concerning a possible application for the BGN cryposystem the author points out that if you want to encrypt a unit vector $\overrightarrow{u_l}$ of size $l$ then the ...
0
votes
1answer
94 views
ECKS-PS algorithm: searching in encrypted data; bilinear maps
I have found an encryption algorithm named ECKS-PS (published in the paper Efficient conjunctive keyword search on encrypted data storage system) that allows an user to search in encrypted data. All ...
0
votes
0answers
19 views
ECKS-PS algorithm: searching in encrypted data; bilinear maps [duplicate]
I have found an encryption algorithm named ECKS-PS (published in a paper named 'efficient conjunctive keyword search on encrypted data storage system', written by Jin Wook Byun, Dong Hoon Lee, and ...
1
vote
1answer
73 views
Ciphers in CBC mode reveal place of change in plaintext
Theoretically, when using a symmetric block cipher in CBC mode, the current block is dependent on the previous block. Suppose one plaintext is encrypted using CBC, and then one bit of it is changed, ...
-3
votes
1answer
183 views
Multi layer encryption with ECB mode [closed]
if i use the 2 of the same key with 2 of the same algoritm when encrypting in ECB like when i have 2 blocks of the same color and i encrypt the 2 blocks with the same color the cipher text should
not ...
2
votes
1answer
58 views
Why constrain the message lengths in indistinguishability in the presence of an eavesdropper?
I need your help with a very basic concept in cryptography which I can't understand/prove on my own.
I'm trying to prove and understand why, under "indistinguishability in the presence
of an ...
2
votes
2answers
143 views
How can mega store my login details and still be secure?
I understand how Mega's encryption works. For a quick summary of all those in the future looking for an answer on this... here is how it works:
Upon first signing up for an account you make a ...
1
vote
1answer
119 views
What's the difference between Trapdoor Functions and Encryption Functions?
From Wikipedia:
A trapdoor function is a function that is easy to compute in one
direction, yet believed to be difficult to compute in the opposite
direction (finding its inverse) without ...
5
votes
1answer
104 views
Using encryption schemes for identification
I've been researching how to implement a post-quantum SSL-like connection authentication, especially correct identification&authentization of the server/client. Because good post-quantum digital ...
4
votes
1answer
105 views
Client and server using same SSL certificate - any issues?
I'm working on software where multiple components will communicate with each other using SSL.
There would be one central component acting as a server, which would also require the clients to present ...
2
votes
1answer
247 views
Is AES-256 a post-quantum secure cipher or not?
We know Grover's algorithm speedup brute-force attacks two time faster in block ciphers (e.g brute-forcing 128 bit keys take $2^{64}$ operations not $2^{128}$).
That explains why we are using 256 bit ...
1
vote
2answers
88 views
Can two rc4 encoded messages be XORed and decrypted if encrypted with the same key?
If I have the following:
E1 = RC4(M1, K);
E2 = RC4(M2, K);
If two different messages M1 and M2 are encrypted with the same key, K, can the key be recovered by ...
0
votes
1answer
79 views
In which disciplinary kind can Cryptography be put?
Is it a multidisciplinary? an interdisciplinary? a cross-disciplinary? or a trans-disciplinary?
what are the basis put to describe each kind?
I mean how can we infer by which disciplinary field we can ...
1
vote
2answers
138 views
Security of Deterministic Encryption Scheme
A deterministic encryption scheme is a cryptosystem which always produces the same ciphertext for a given plaintext and key, even over separate executions of the encryption algorithm.
Although we ...
4
votes
3answers
212 views
Comparison: complexity measures vs. security
Assume that you want to compare several cryptographic primitives (say, encryption schemes), and choose one. You need to consider several complexity measures, such as the key length, encryption time, ...
2
votes
1answer
119 views
How to compute the dot product on encrypted values?
Is there a practical homomorphic encryption scheme that can give reasonable execution time results in computing a dot product:
$$a_1*b_1 + a_2*b_2 +a_3*b_3 +\ldots+ a_n*b_n$$
I imagine the scheme will ...
0
votes
1answer
76 views
Encrypting and Decrypting a 19-digits long BigInteger
How can I take a maximum 19-digits long BigInteger and encrypt it with the following rules:
The result must be based on digits and lower-case English letters ...
6
votes
1answer
165 views
How would one crack a weak but unknown encryption protocol?
I asked a question on security.stackexchange, but was told it would be a better fit here:
http://security.stackexchange.com/questions/32779/how-would-one-crack-a-weak-but-unknown-encryption-protocol
...
20
votes
5answers
6k views
Is Convergent Encryption really secure?
Recently a company called Bitcasa demonstrated a product of cloud storage. they indicated that they would use "Convergent Encryption" to secure your data and de-duplicate, essentially one copy of the ...
-5
votes
1answer
34 views
decrypting unreadable string [closed]
Does anyone recognise this type of encryption? These are phone numbers consisting of 10 digits and starting with 0 but the encrypted text width is not 10 and does not start with the same character.
6
votes
3answers
465 views
Is this encryption algorithm build from MD5 secure?
I'm being asked to use an encryption algorithm in my code, and besides the fact that I'm sure there will be implementation faults that lead to vulnerabilities, I also have concerns about the algorithm ...
0
votes
1answer
50 views
Solving congruences using PARI
I'm having trouble finding info in the docs about how to solve a system of congruences. The closest I can find is 'matsolvemod' in here: ...
1
vote
1answer
58 views
What is total key space in transposition algorithms
How we can measure key space in transposition algorithms? Should we specify the method, like rail fence ?
2
votes
1answer
222 views
Low Public Exponent Attack for RSA
I'm having trouble understanding the algorithm for finding the original message $m$, when there is a small public exponent. Here is the example I'm trying to follow (you can also read it in the 'Low ...
-2
votes
1answer
330 views
Is a steganographic technique which has a universal decoder novel/secure? [closed]
I've come up with an approach to steganography which needs review of both its cryptography and its math. There's a complete working implementation at https://github.com/bramcohen/DissidentX and the ...
0
votes
2answers
105 views
Strong encryption done by hand [duplicate]
One of the distinguishing features of a good encryption algorithm, is that it is easy to encrypt, and hard to crack. Are there any that are easy enough for average folk to remember, and calculate by ...
2
votes
1answer
162 views
Encrypting many small messages (log-lines)
What would be the best way of encrypting small mesasages to be stored in encrypted form? (This sounds like somthing a textbook would cover, but I haven't found any references).
Let's say I have many ...
0
votes
0answers
55 views
What is the significance of i^Q mod P = 1 and are there any special properties to be aware of?
I'm studying UProve, and one of the fundamental components of this technology is based upon the relationship between
i^Q mod P = 1
Lacking a specific name I can call this mathematical ...
1
vote
2answers
138 views
Zero-Knowledge Challenge-Responce Protocol
Good day to everyone.
I am trying to implement an e voting system (just for reference -it is not important though-it is described at the Internet Voting Protocol Based on Improved Implicit Security ...
1
vote
2answers
240 views
Would a “Triple AES” (in the sense of how Triple Des works) serve for a dramatic increase in safety?
The system requires to be as paranoid as possible regarding security. One of the few contemplated changes to the current design is to use multiple encryption. First proposal was to use Serpent on top ...
2
votes
1answer
220 views
XOR cipher for encrypting compiled C code
I'm exploring ways of encrypting Intel hex files we send to customers for flashing onto an embedded device. The embedded processor itself has a built-in mechanism that prevents anyone from reading the ...
0
votes
1answer
76 views
GPG vs PGP vs OpenSSH and management of them
What is the main difference of the three?
Can I use only one of them for everything (e.g. GPG for SSH authentication)
If I encrypt my private key with a pass-phrase, is it strong enough so that if ...
5
votes
1answer
516 views
Why is CAMELLIA suddenly so widely used?
When nowadays I point my browser to https sites, the cipher that is on most occasions used is Camellia. My browsers (Chrome and Firefox) seem to prefer it, even when AES is available.
Is that not ...
3
votes
3answers
175 views
Why do we assume un-security of communication channel on every cryptography system
While reading about a few cryptographic systems, I noticed that we always assume the communication channel is not secured. Why is this assumption made? And, why the effort is being put into designing ...
1
vote
2answers
61 views
Is it safe for the ChaCha8 nonce to be deterministic?
ChaCha8 takes a 8 byte nonce (or IV) that should not be the same twice for the same key. Generating this nonce randomly makes me very very nervous for collisions.
Is it safe to generate this nonce ...
4
votes
1answer
148 views
Question about why RSA is hard to attack
I think I understand why RSA is hard to attack but I'd like to get clarification if I actually do.
Assume there are two people, Alice and Bob, who are attempting to communicate privately but that we ...
1
vote
4answers
183 views
Bad/Crackable Encryption Example?
I've been tasked with building up some security exercises (basic CTF training kind of stuff) for work. This should contain a bit of crypto, but my knowledge in this space has been limited to using the ...
-1
votes
1answer
41 views
Security system theoretical task [closed]
Imagine that you are responsible for implementation of a new security system in a company which boss insists on having new encryption algorithm.
Here are couple of solutions which has been presented ...
-1
votes
1answer
131 views
What is a good intro to cryptography book? [closed]
I'm a math major in college and its mostly theoretical like analysis, etc. and I have been interested in the idea of cryptography, so naturally I'm interested in possibly studying up on it a litle bit ...
2
votes
1answer
274 views
How does Output Feedback mode use the initialization vector?
How can I process Initialization Vector inside the Block Cipher Encryption box (using for example AES) together with the Key?
Will I encrypt the Initialization Vector like a block of plaintext?
So ...
3
votes
1answer
98 views
Low complexity implementation of a small blocksize cipher (< 64 bit)
Searching for "small blocksize cipher" finds a number of discussions on the topic, mostly refering to FPE.
This one in particular suggests using AES as the round function of a Feistel network.
The ...
0
votes
1answer
223 views
How to break AES CBC with PKCS#5 padding?
If I have a string encoded with AES CBC with PKCS#5 padding, how can one possibly decrypt/crack it? What are the approaches that one can take to break its security?
-2
votes
1answer
101 views
ASCII Message in TV show? [closed]
So I was watching a popular series tonight (Person Of Interest) when suddenly during a frame change I noticed a very quick blue screen with writing.
At the time I never thought anything of it as it ...
4
votes
3answers
925 views
Why programming languages don't provide simple encryption methods?
In c#, there is a namespace called System.Security.Cryptography and there are many classes in this namespace, which help developers encrypt and decrypt data. ...
4
votes
3answers
338 views
How and why can a decryption program tell me that a key is incorrect?
I have noticed that some programs used for file encryption will tell you if an entered key is wrong when you try to decrypt. It seems (to me at least) that this would mean that the key somehow is ...
