usually secret information used as input to various kinds of cryptographic algorithms, like encryption, signature, MAC, to select the concrete transformation done by the algorithm.
0
votes
1answer
59 views
Encrypting a broadcast channel
We're building a data service that is expected to go out through a single "fat pipe" channel. The design requirement says that the data in the channel must be protected by authentication and ...
-2
votes
0answers
34 views
session keys in an online e-voting system [closed]
I do not have much knowledge about cryptography or public and private keys, and your help will be much appreciated. I am totally a beginner, and no one from my university can help me.
I am trying to ...
-1
votes
0answers
25 views
Create groups of keys [closed]
I looking for a solution to encrypt, sign documents or email a key group and send to one customers. The group of keys are had already created user keys and I would like to use them.
Is not an option ...
1
vote
1answer
71 views
Requiring a “supervisor” key pair and a “user” key pair to decrypt multiple-recipient messages
I've been toying with some encryption scenarios recently. One of the hard ones I came across is a multi-party system.
So we have
Bob -- The person who sends the message (and knows it's recipients)
...
1
vote
1answer
114 views
AES AddRoundKey
Looking at the first step of AES encryption I see that we XOR the key with the plaintext block. Why is the actual key involved at all, why not just use the round keys derived from the key schedule?
1
vote
1answer
87 views
Given a certain entrophy per character, how long should a passphrase be to guarantee key strength?
Given an entrophy of 1.5 bits per character, how long does a passphrase have the be to guarantee a key strength of a 128 bit random key?
Assuming an alphabet of 26, one character takes log2(26)=4.7 ...
4
votes
1answer
98 views
Client and server using same SSL certificate - any issues?
I'm working on software where multiple components will communicate with each other using SSL.
There would be one central component acting as a server, which would also require the clients to present ...
1
vote
1answer
53 views
What is total key space in transposition algorithms
How we can measure key space in transposition algorithms? Should we specify the method, like rail fence ?
0
votes
1answer
92 views
Scrypt as a KDF with one-time high-entropy input
I'm looking at using Scrypt as a KDF. Assume the following:
the input will always be high-entropy random bytes generated by a CSPRNG
the length of the input can vary from between 8 to 32 bytes
the ...
0
votes
1answer
80 views
brute force attack on KDF vs KEY
if we believe 256bit keys are secure in AES against any brute force attack, is that possible we use a KDF (convert user's weak entered password in truecrypt into a fixed AES key) with too much round ...
1
vote
1answer
118 views
Do practical key-less cryptosystems exist?
Hopefully the question isn't too broad or off.
Basically, are there any practical, and by practical I mean secure enough that a ciphertext only attack is infeasible, key-less cryptosystems? For ...
7
votes
1answer
314 views
Why do all SSH-RSA Keys begin with “AAAAB3NzaC1yc”?
My Friend and I have been generating a few ssh2-rsa keys and noticed that all the public keys began with "AAAAB3NzaC1yc". The similarity extended to "AAAAB3NzaC1yc2EAAAABIwAAAQEA" between two keys I ...
4
votes
3answers
316 views
How and why can a decryption program tell me that a key is incorrect?
I have noticed that some programs used for file encryption will tell you if an entered key is wrong when you try to decrypt. It seems (to me at least) that this would mean that the key somehow is ...
0
votes
1answer
78 views
True 128bit secured password length?
assume we say 128bit keys are secure so a 16 character long password is safe, but if i even use lower case and upper case letters with numbers and special characters on my keyboard its about 80 ...
3
votes
2answers
147 views
Reason(s) for using a KDF for encryption keys
Assuming I already have a 256-key (32 char password) for AES encryption, comprised of random alpha-numeric characters and punctuation (95 possible ascii chars), generated by a decent PRNG, is there ...
2
votes
1answer
83 views
How to generate a public key from a private ECDSA key?
Having some specific ECDSA curve and a private key, how does one calculate the public key? I am having a hard time finding the algorithm and equations for it.
0
votes
1answer
82 views
Need for Twin Elgamal encryption
What is the need for two private/public keys in twin elgamal?
I'm relatively new and would need some help.
1
vote
3answers
124 views
Deterministic key generation
In a situation where it is required to generate n number of keys deterministically from a single piece of seed information can we assume that b breached number of keys, no matter what the quantity ...
3
votes
2answers
108 views
Is there an advantage to storing keys split between several hashes?
I have a question about the way to store a key or password that was used for encryption, so that the application can check if the user put in the right key for decryption. If I make a mistake, please ...
0
votes
1answer
71 views
On the fly key generation for cloud storage objects
Cryptographic key management involves storing and managing encryption decryption keys , certificates , signatures etc .
If the requirement is just to store and manage object specific keys ( say ...
0
votes
0answers
81 views
How to encrypt OpenVPN setup traffic [closed]
I have an OpenVPN server and a client that can successfully connect to said server. The traffic over the tunnel is encrypted. The tunnel works quite well.
However what is NOT encrypted (cleartext) is ...
2
votes
2answers
104 views
Can you use the same key to provide a signature and a MAC?
Apologies if this is a stupid question, but I'd be grateful if someone could provide an answer. I'm assuming that you need to use different keys to provide these functions, is that correct?
3
votes
4answers
216 views
symmetric-key cryptography based key establishment techniques
Most of the current key exchange techniques are based on public-key cryptography. Are there any key exchange/establishment techniques based on symmetric-key cryptography too ?
In my setup primary ...
0
votes
1answer
152 views
Key Scheduling of International Data Encryption Algorithm (IDEA)
How to perform the key scheduling in International Data Encryption Algorithm (IDEA),
I took a research but I can't understand how to perform it,
"further groups of eight keys are created by rotating ...
1
vote
1answer
102 views
Is it safe to hold key file's hash in application
Title says all; Is it safe to hold key file's hash (MD5 or SHA1) in application (hard-coded)?
Thanks
0
votes
0answers
110 views
How do you ensure that a large remote file is encrypted? [closed]
On a general level, is there any way to ensure that a file has been encrypted? Specifically, is there any way to check this remotely using something like a checksum or key?
Here's a simplified ...
1
vote
3answers
175 views
One time pad key exchange
If two parties want to communicate with securely using OTP , how is the key ( that is lengthy as plain text) shared with other party for decryption ?
6
votes
2answers
339 views
What's is the main difference between a key, an IV and a nonce?
What are the main differences between a nonce, a key and an IV. Without any doubt the key should be kept secret. But what about the nonce and the IV. What's the main difference between them and their ...
3
votes
1answer
412 views
Figuring out key in hill cipher (chosen-plaintext attack)
I have been wondering what approach to take in order to figure out what key was used to encrypt a message using the hill cipher.
I know it is possible to obtain it even if it were just a ...
2
votes
2answers
203 views
Encryption scheme with equivalent keys?
I've long been looking for a symmetric encryption scheme (or algorithm) with equivalent keys. Let me define what I want:
Symmetric encryption algorithm with encryption function $E_k$ and inverse ...
2
votes
1answer
124 views
Is it OK to use a data-encryption key for key wrapping, too?
Our industry (area of cheap networked devices) has a standard that defines the usage of keys for both authentication and encryption using EAX mode of AES. This standard does not define key management, ...
2
votes
4answers
235 views
What is the actual difference between security through obscurity and true encryption?
In an abstract sense, aren't both the same?
Don't their definitions boil down to the following?
security through obscurity:
trying to make sure some information cannot be obtained without knowing ...
1
vote
2answers
748 views
Secure private key storage
I'm developing application in Java that has to store RSA keys in software for foreseeable future (that is, at least 10 years).
The two most common standards of storing private keys are PKCS12 and JKS ...
2
votes
3answers
218 views
Existing works on pre-computing ElGamal ephermal keys
I was playing around with a problem in e-voting schemes that use additive homomorphic encryption to tally votes, namely that at the end of the day somebody (or somebodies, if the secret material has ...
1
vote
1answer
142 views
Generating a cryptographically secure, many-time use, symmetric encryption key
I need to generate a 256 bit encryption key described by the adjectives in the title. Currently I intend to create the key using this RNG.
Is this a secure manner of creating the key, given that it ...
4
votes
2answers
290 views
Using bad generator in ElGamal Encryption
Suppose Alice chooses a random Prime $p$ and a random private Key $a \in \mathbb{Z}^*_p$. By accident, she also chooses a random number $g \in \mathbb{Z}^*_p$, which is not a generator of ...
2
votes
1answer
57 views
Separate Read and Write Keys in TLS Key Material
Why does the TLS protocol use different symmetric keys for receiving and sending data?
Isn't it enough to have a single key used for both reading and writing?
3
votes
1answer
195 views
Is quantum key distribution safe against MITM attacks too?
i read this recently: http://www.newscientist.com/article/dn12786-quantum-cryptography-to-protect-swiss-election.html
and some parts of this: http://en.wikipedia.org/wiki/Quantum_key_distribution
...
6
votes
2answers
375 views
Hash decrypts key, key decrypts cipher… why?
I noticed recently that a couple of pieces of encryption software (TrueCrypt being one of them) don't directly use a hash of the password as the key for the block cipher. Instead, they generate a ...
0
votes
2answers
69 views
Encrypting documents through a proxy key
Suppose I'm developing an app to secure a lot of documents. These documents were encrypted (say, using AES) with a key X.
This key X is basically the password that the user enters before wanting to ...
4
votes
3answers
278 views
Order of cascaded ciphers
Does the order of a block cipher cascade (e.g. in TrueCrypt) make a difference to the security provided, assuming independant keys?
For example:
...
5
votes
4answers
361 views
Creating an encryption key from several other keys and using hash functions
I want to combine two or more keys to create a single encryption key that relies on all of them. What is the proper method for doing that? Simple XOR? Using hash functions? Something else?
I ...
4
votes
4answers
456 views
What is the largest performed/possible bruteforce attack to date?
I've read that cracking 128-bit key is currently out of reach of all humanity. However, I can't seem to find any information on what scope of brute force attacks have been performed or are possible at ...
1
vote
1answer
146 views
Which encodings have |encoding key| >> |decoding key|?
I'm looking for an encoding scheme that requires a very large encoding key E (>10MB) and suffices with a relatively small decoding key ...
5
votes
2answers
641 views
How to calculate an IV when I have a shared private key?
I'm working with a server/client system that has securely negotiated a private key. I need to encrypt/decrypt messages passing in both directions which are typically between 100 bytes to 100 KB. I'm ...
3
votes
4answers
621 views
What is an efficient random number generation algorithm
I have been looking for the algorithm that generates random number and this algorithm has to be more secure.
I am going to use this algorithm to generate the salt that will be used in PBKDF2.
...
3
votes
2answers
115 views
Helper data authentication in PUFs
As I understand, PUFs work by using two procedures: generation and reproduction. Generation reads a value $w$ from a fuzzy source and generates a key $R$ and helper data $P$. Then, in the reproduction ...
5
votes
1answer
332 views
Related-key attacks on AES
According to Wikipedia:
Related-key attacks can break AES-192 and AES-256 with complexities $2^{176}$ and $2^{99.5}$, respectively.
What are the requirements for these attacks (i.e how many ...
4
votes
1answer
439 views
How does GPG verify succesful decryption?
How does GPG (or other programs using the OpenPGP file format) verify that it has succeeded with decryption (for symmetrically encrypted data)?
Is something appended to the clear text so there exist ...
5
votes
1answer
173 views
Why are the random exponents so much bigger in the Socialist Millionaire protocol versus Diffie-Hellman key exchange?
Section 8, Security considerations, of RFC3526, which defines groups used for Diffie-Hellman has a table recommending some random exponent sizes. In particular, it says:
The strength of a key ...
