usually secret information used as input to various kinds of cryptographic algorithms, like encryption, signature, MAC, to select the concrete transformation done by the algorithm.
1
vote
2answers
70 views
Encrypting and MACing different data with same key
It's a well-known best practice to not use one key to both encrypt and MAC data. In my application, there are instances where I MAC a piece of data without having encrypted it first. Do I still need a ...
1
vote
1answer
53 views
How is text converted to a number for RSA?
According to http://en.wikipedia.org/wiki/RSA_%28algorithm%29#Key_generation the key length is the number of bits in n. So how can a message of many megabytes (millions of bits) be modded by a 1024 ...
1
vote
1answer
36 views
Difference entity authentication and implicit key authentication
From the Handbook of Applied Cryptography, in discussions of key sharing algorithms, I see definitions:
Implicit key authentication is when one party is assured that no other aside from a ...
1
vote
1answer
69 views
AES encryption with multiple keys
I would like to encrypt some data using a combination of multiple keys. There would be two keys: a client keys that would be generated for each client and a single server/application key used by ...
0
votes
1answer
63 views
Encrypting a broadcast channel
We're building a data service that is expected to go out through a single "fat pipe" channel. The design requirement says that the data in the channel must be protected by authentication and ...
1
vote
3answers
119 views
Requiring a “supervisor” key pair and a “user” key pair to decrypt multiple-recipient messages
I've been toying with some encryption scenarios recently. One of the hard ones I came across is a multi-party system.
So we have
Bob -- The person who sends the message (and knows it's recipients)
...
1
vote
1answer
156 views
AES AddRoundKey
Looking at the first step of AES encryption I see that we XOR the key with the plaintext block. Why is the actual key involved at all, why not just use the round keys derived from the key schedule?
1
vote
1answer
93 views
Given a certain entrophy per character, how long should a passphrase be to guarantee key strength?
Given an entrophy of 1.5 bits per character, how long does a passphrase have the be to guarantee a key strength of a 128 bit random key?
Assuming an alphabet of 26, one character takes log2(26)=4.7 ...
4
votes
1answer
105 views
Client and server using same SSL certificate - any issues?
I'm working on software where multiple components will communicate with each other using SSL.
There would be one central component acting as a server, which would also require the clients to present ...
1
vote
1answer
57 views
What is total key space in transposition algorithms
How we can measure key space in transposition algorithms? Should we specify the method, like rail fence ?
0
votes
1answer
108 views
Scrypt as a KDF with one-time high-entropy input
I'm looking at using Scrypt as a KDF. Assume the following:
the input will always be high-entropy random bytes generated by a CSPRNG
the length of the input can vary from between 8 to 32 bytes
the ...
0
votes
1answer
98 views
brute force attack on KDF vs KEY
if we believe 256bit keys are secure in AES against any brute force attack, is that possible we use a KDF (convert user's weak entered password in truecrypt into a fixed AES key) with too much round ...
1
vote
1answer
120 views
Do practical key-less cryptosystems exist?
Hopefully the question isn't too broad or off.
Basically, are there any practical, and by practical I mean secure enough that a ciphertext only attack is infeasible, key-less cryptosystems? For ...
7
votes
1answer
335 views
Why do all SSH-RSA Keys begin with “AAAAB3NzaC1yc”?
My Friend and I have been generating a few ssh2-rsa keys and noticed that all the public keys began with "AAAAB3NzaC1yc". The similarity extended to "AAAAB3NzaC1yc2EAAAABIwAAAQEA" between two keys I ...
4
votes
3answers
338 views
How and why can a decryption program tell me that a key is incorrect?
I have noticed that some programs used for file encryption will tell you if an entered key is wrong when you try to decrypt. It seems (to me at least) that this would mean that the key somehow is ...
0
votes
1answer
85 views
True 128bit secured password length?
assume we say 128bit keys are secure so a 16 character long password is safe, but if i even use lower case and upper case letters with numbers and special characters on my keyboard its about 80 ...
3
votes
2answers
164 views
Reason(s) for using a KDF for encryption keys
Assuming I already have a 256-key (32 char password) for AES encryption, comprised of random alpha-numeric characters and punctuation (95 possible ascii chars), generated by a decent PRNG, is there ...
2
votes
1answer
98 views
How to generate a public key from a private ECDSA key?
Having some specific ECDSA curve and a private key, how does one calculate the public key? I am having a hard time finding the algorithm and equations for it.
0
votes
1answer
89 views
Need for Twin Elgamal encryption
What is the need for two private/public keys in twin elgamal?
I'm relatively new and would need some help.
1
vote
3answers
130 views
Deterministic key generation
In a situation where it is required to generate n number of keys deterministically from a single piece of seed information can we assume that b breached number of keys, no matter what the quantity ...
3
votes
2answers
112 views
Is there an advantage to storing keys split between several hashes?
I have a question about the way to store a key or password that was used for encryption, so that the application can check if the user put in the right key for decryption. If I make a mistake, please ...
0
votes
1answer
77 views
On the fly key generation for cloud storage objects
Cryptographic key management involves storing and managing encryption decryption keys , certificates , signatures etc .
If the requirement is just to store and manage object specific keys ( say ...
0
votes
0answers
89 views
How to encrypt OpenVPN setup traffic [closed]
I have an OpenVPN server and a client that can successfully connect to said server. The traffic over the tunnel is encrypted. The tunnel works quite well.
However what is NOT encrypted (cleartext) is ...
2
votes
2answers
106 views
Can you use the same key to provide a signature and a MAC?
Apologies if this is a stupid question, but I'd be grateful if someone could provide an answer. I'm assuming that you need to use different keys to provide these functions, is that correct?
3
votes
4answers
226 views
symmetric-key cryptography based key establishment techniques
Most of the current key exchange techniques are based on public-key cryptography. Are there any key exchange/establishment techniques based on symmetric-key cryptography too ?
In my setup primary ...
0
votes
1answer
173 views
Key Scheduling of International Data Encryption Algorithm (IDEA)
How to perform the key scheduling in International Data Encryption Algorithm (IDEA),
I took a research but I can't understand how to perform it,
"further groups of eight keys are created by rotating ...
2
votes
1answer
104 views
Is it safe to hold key file's hash in application
Title says all; Is it safe to hold key file's hash (MD5 or SHA1) in application (hard-coded)?
Thanks
0
votes
0answers
113 views
How do you ensure that a large remote file is encrypted? [closed]
On a general level, is there any way to ensure that a file has been encrypted? Specifically, is there any way to check this remotely using something like a checksum or key?
Here's a simplified ...
1
vote
3answers
188 views
One time pad key exchange
If two parties want to communicate with securely using OTP , how is the key ( that is lengthy as plain text) shared with other party for decryption ?
6
votes
2answers
378 views
What's is the main difference between a key, an IV and a nonce?
What are the main differences between a nonce, a key and an IV. Without any doubt the key should be kept secret. But what about the nonce and the IV. What's the main difference between them and their ...
3
votes
1answer
428 views
Figuring out key in hill cipher (chosen-plaintext attack)
I have been wondering what approach to take in order to figure out what key was used to encrypt a message using the hill cipher.
I know it is possible to obtain it even if it were just a ...
2
votes
2answers
204 views
Encryption scheme with equivalent keys?
I've long been looking for a symmetric encryption scheme (or algorithm) with equivalent keys. Let me define what I want:
Symmetric encryption algorithm with encryption function $E_k$ and inverse ...
2
votes
1answer
130 views
Is it OK to use a data-encryption key for key wrapping, too?
Our industry (area of cheap networked devices) has a standard that defines the usage of keys for both authentication and encryption using EAX mode of AES. This standard does not define key management, ...
2
votes
4answers
246 views
What is the actual difference between security through obscurity and true encryption?
In an abstract sense, aren't both the same?
Don't their definitions boil down to the following?
security through obscurity:
trying to make sure some information cannot be obtained without knowing ...
1
vote
2answers
810 views
Secure private key storage
I'm developing application in Java that has to store RSA keys in software for foreseeable future (that is, at least 10 years).
The two most common standards of storing private keys are PKCS12 and JKS ...
2
votes
3answers
222 views
Existing works on pre-computing ElGamal ephermal keys
I was playing around with a problem in e-voting schemes that use additive homomorphic encryption to tally votes, namely that at the end of the day somebody (or somebodies, if the secret material has ...
1
vote
1answer
147 views
Generating a cryptographically secure, many-time use, symmetric encryption key
I need to generate a 256 bit encryption key described by the adjectives in the title. Currently I intend to create the key using this RNG.
Is this a secure manner of creating the key, given that it ...
4
votes
2answers
323 views
Using bad generator in ElGamal Encryption
Suppose Alice chooses a random Prime $p$ and a random private Key $a \in \mathbb{Z}^*_p$. By accident, she also chooses a random number $g \in \mathbb{Z}^*_p$, which is not a generator of ...
2
votes
1answer
62 views
Separate Read and Write Keys in TLS Key Material
Why does the TLS protocol use different symmetric keys for receiving and sending data?
Isn't it enough to have a single key used for both reading and writing?
3
votes
1answer
206 views
Is quantum key distribution safe against MITM attacks too?
i read this recently: http://www.newscientist.com/article/dn12786-quantum-cryptography-to-protect-swiss-election.html
and some parts of this: http://en.wikipedia.org/wiki/Quantum_key_distribution
...
6
votes
2answers
387 views
Hash decrypts key, key decrypts cipher… why?
I noticed recently that a couple of pieces of encryption software (TrueCrypt being one of them) don't directly use a hash of the password as the key for the block cipher. Instead, they generate a ...
0
votes
2answers
71 views
Encrypting documents through a proxy key
Suppose I'm developing an app to secure a lot of documents. These documents were encrypted (say, using AES) with a key X.
This key X is basically the password that the user enters before wanting to ...
4
votes
3answers
286 views
Order of cascaded ciphers
Does the order of a block cipher cascade (e.g. in TrueCrypt) make a difference to the security provided, assuming independant keys?
For example:
...
5
votes
4answers
384 views
Creating an encryption key from several other keys and using hash functions
I want to combine two or more keys to create a single encryption key that relies on all of them. What is the proper method for doing that? Simple XOR? Using hash functions? Something else?
I ...
4
votes
4answers
482 views
What is the largest performed/possible bruteforce attack to date?
I've read that cracking 128-bit key is currently out of reach of all humanity. However, I can't seem to find any information on what scope of brute force attacks have been performed or are possible at ...
1
vote
1answer
157 views
Which encodings have |encoding key| >> |decoding key|?
I'm looking for an encoding scheme that requires a very large encoding key E (>10MB) and suffices with a relatively small decoding key ...
5
votes
2answers
683 views
How to calculate an IV when I have a shared private key?
I'm working with a server/client system that has securely negotiated a private key. I need to encrypt/decrypt messages passing in both directions which are typically between 100 bytes to 100 KB. I'm ...
3
votes
4answers
631 views
What is an efficient random number generation algorithm
I have been looking for the algorithm that generates random number and this algorithm has to be more secure.
I am going to use this algorithm to generate the salt that will be used in PBKDF2.
...
3
votes
2answers
119 views
Helper data authentication in PUFs
As I understand, PUFs work by using two procedures: generation and reproduction. Generation reads a value $w$ from a fuzzy source and generates a key $R$ and helper data $P$. Then, in the reproduction ...
5
votes
1answer
361 views
Related-key attacks on AES
According to Wikipedia:
Related-key attacks can break AES-192 and AES-256 with complexities $2^{176}$ and $2^{99.5}$, respectively.
What are the requirements for these attacks (i.e how many ...
