-2
votes
0answers
52 views

Is the likelihood of a birthday collision linear (evenly distributed) for all ciphers? When are they not?

When discussing the Birthday Principal, in combination with the pigeon hole principal, it was argued that an uneven distribution of birthdays (bias for September and any Tuesday of the year) made ...
3
votes
1answer
66 views

When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?

I'm taking an online class on cryptography at corsera.org / Stanford, and the professor is explaining that it's OK to truncate an AES MAC to $w$ bits as long as $1/2^w$ is still negligible (say $w ...
1
vote
2answers
170 views

Deriving HMAC key and cipher key from passphrase? [duplicate]

I'm encrypting a file with AES-256 in CBC mode. I needed to add an HMAC for authentication and validation of the file contents and passphrase, so I used a SHA-256 HMAC over chunks of my file ...
0
votes
0answers
39 views

Security of .net AES implementation and security of a hash MAC

Hello I wanted to ask if there is any review about the security of the AES implementation of the .net Framework? I found nothing concrete to that question, searching the Internet. And, but this is a ...
1
vote
1answer
401 views

AES-CMAC passes every test except two

i wrote this code: ...