Symmetric cryptosystems assume two communicating entities share a pre-established secret key.

learn more… | top users | synonyms

1
vote
2answers
140 views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

We have ciphers that handle small amounts of entropy, such as a 256 bit key for AES; and we have one time pads for enciphering 1:1 entropy, such as a 1GB key for a 1GB file if you could ever harvest ...
1
vote
1answer
20 views

Crypto lib that use files instead of passphrase

I would like to program an application to allow people to encrypt files without using a password or pass-phrase but an arbitrary long file. I'm searching for a library that allows me to safely create ...
1
vote
1answer
98 views

AES implementation to encrypt files

I'm making a small python program to encrypt an arbitrary text file. Currently I have a file to store passwords (hashed values), so nothing stored in plaintext. The user enters the command line ...
5
votes
0answers
31 views

Understanding the definition of HGD

On the section 4.2, page 10, of the paper Order-Preserving Symmetric Encryption, the authors define two subroutines: the first one is called $HGD$ and the second one is $GetCoins$. I have doubts ...
5
votes
0answers
254 views

What is the original SKID3 protocol?

While searching for a mutual authentication protocol I often stumbled upon SKID3. However I encountered different variations of it. The basic structure is the following: (1) A --> B: rA (2) B --> ...
5
votes
0answers
114 views

Homogenous and heterogeneous Unbalanced Feistel Networks

Unbalanced Feistel networks can be homogenous (F-function identical in each round), or they can be heterogeneous (F-function not always identical in each round). The advantage of heterogeneous UFNs ...
4
votes
0answers
66 views

How to use a stream cipher to sign a message?

Are there known constructions which allow to sign a message M (let's say it will be sent as clear text) using a stream cipher C and a symmetric secret key K? So, we have M, C, K and we want to send ...
3
votes
0answers
61 views

Majority encryption algorithm?

Assume that I want to leave an encrypted message to a group of $n$ people in a way that they can only decrypt it if they work together in the following sense: For some fixed $k < n$ every ...
3
votes
0answers
41 views

How to make a “zero knowledge” cache/key-value store

I'd like to use a possibly insecure cache for storing expensive-to-calculate sensitive information. My requirements are: If the cache ever gets compromised it should reveal nothing about its ids or ...
3
votes
0answers
62 views

LR-Oracle Experiment in Lindell and Katz

In reference to the LR-Oracle experiment in “Introduction to Modern Cryptography” (2nd edition) by Lindell & Katz, Definition 3.23 states a scheme $\pi = (Gen,Enc_K,Dec_K)$ is CPA secure for ...
3
votes
0answers
90 views

Using machine-learning techniques for data-dependent operations in ciphers

From 'Methods of Symmetric Cryptanalysis' by Dmitry Khovratovich, The data-dependent operations are one of the most controversial design concepts. We say that an operation is data-dependent, if it ...
2
votes
0answers
19 views

Creating an SPN cipher from ChaCha20 or Salsa20's double round function

Given that ChaCha20's building blocks have been also used to construct a hash function, can the double round function from either ChaCha20 or Salsa20 be used to construct a secure SP-network cipher? ...
2
votes
0answers
36 views

How would you name and/or describe this algorithm?

First up: this is not a decoding request or anything. This is about terminology. Twice per year, we email another department to ask for a new licence file for their software. They are always slow to ...
2
votes
0answers
34 views

Hiding the identity of a party within the Kerberos authentication scheme

In the Kerberos authentication protocol, as described here: would it be safer to replace step (1) with: $$ A \rightarrow T : A, E_{K_A{_{T}}}(B, N_A) $$ so that a passive adversary does not know ...
2
votes
0answers
55 views

Common pitfalls of session key activation?

Assume that initiator $I$ and responder $R$ of a key agreement protocol have agreed on new symmetric session keys $K'_{auth}$ and $K'_{enc}$, e.g. by way of Diffie-Hellman and key derivation, possibly ...
1
vote
0answers
40 views

Which AES encryption do banks use?

I'm trying to find what size keys banks use for symmetric and asymmetric encryption. I know that the symmetric one is smaller because they want it to be fast but I can't find any information on their ...
1
vote
0answers
39 views

Symmetric stream cipher, is it known?

I am thinking on a simple symmetric stream cipher. My first idea is the following: The key is a set of array of random bytes ($\underline{k}_1$ ... $\underline{k}_n$), whose length is $l_1$, $l_2$, ...
1
vote
0answers
54 views

Encryption with a known plaintext

I'm building an application where users can be a part of groups, and can obtain and distribute URLs from the group page that allow anyone who clicks on them to join said group. Groups should not ...
1
vote
0answers
126 views

CCA security of a system that splits messages and encrypts each packet

Propose a symmetric key based crypto-system for implementing a secure email system. This system is based on AES and CCA secure. Suppose that you have to encrypt a large message and that this message ...
1
vote
0answers
42 views

Plaintext-aware encryption for symmetric schemes?

The notion of plaintext-awareness is well-known for asymmetric encryption, but the notion seems to make sense for symmetric encryption as well. Is this a known concept?
1
vote
0answers
87 views

How to distribute symmetric key between $n$ entities?

If there are $n$ servers for broadcasting a symmetric key in such a manner that following holds: No server alone can find the key $K$ alone. Any two servers can pass $k_i$ and $k_j$ such that ...
1
vote
0answers
90 views

Types of cryptography

We have cryptography based on hard problems from number theory, like DDH. When we speak about symmetric cryptography with AES, a mode of encryption (CBC, ...), what is the type of problem ? What is ...
1
vote
0answers
22 views

Cryptography — with a semi-priveleged user in the middle — to prevent request-tampering with another server

I'm working on a chat server for a mobile app I am writing. I would like to use a different application server for non-chat related operations and another application for chat operations. I would ...
1
vote
0answers
164 views

El Gamal encryption scheme and symmetric encryption scheme

Consider the El Gamal encryption scheme, a symmetric encryption scheme (KG,E,D), and the following hybrid encryption scheme having an encryption algorithm that, on input a public key (G,q,g,h), where ...
1
vote
0answers
68 views

Is it feasible to break an encrypted and later encoded message?

A message is sent from a person to another. The plain message is first encrypted, even with a weak algorithm - say, DES. Then, the encrypted message is encoded with a simple substitution, which is ...
0
votes
0answers
14 views

Testing the first 40 bit sequence for A5/1 if all registers initialized to 1

I have an assignment where my instructor asked to generate the first 40 bits for an A5/1 algorithm if all registers are initialized to '1' initially . I have implemented the algorithm successfully ...
0
votes
0answers
10 views

Do eCryptfs encrypt same source files into same retulsing encrypted files?

Can I assume that for given eCryptfs mount, files with byte-by-byte same content will map into byte-by-byte same encrypted files in underlying filesystem (i.e. after umount) ? (i.e. if resulting ...
0
votes
0answers
37 views

Non-repudiation in classical cryptosystem

How can we modify classical cryptography system to provide non-repudiation? I want to ensure non-repudiation in symmetric key cryptography so that we can find out who is sender of a particular ...
0
votes
0answers
27 views

Decrypting a file encrypted with AESCRYPT using key instead of password

i have encrypted a file using aescrypt and took memory image while the file was being encrypted and hence have the key that was used for encryption in the image but not the password, can i decrypt the ...
0
votes
0answers
23 views

MISTY1 encryption/ extension tricks

I'm trying to understand MISTY1 encryption algorithm but i faced some problems in key scheduling part : Key scheduling part consists of the following operations. for i = 0, ..., 7 do EK[i] = ...
0
votes
0answers
30 views

Key diversification is a good alternative?

This is just a concept question that I need to clarify, I know that you can use key diversification as an alternative to store different symmetric keys in a database. Key diversification uses a ...
0
votes
0answers
39 views

Symmetric encryption vulnerable when encrypting and decrypting are the same?

To my understanding, symmetric encryption is where encrypting and decrypting data can occur with the same key. It's possible for symmetric encryption that the encrypting and decrypting algorithms are ...
0
votes
0answers
23 views

Symmetrical Block Encryption with Synchronised Remote Key Change

I'm considering a theoretical design of a walkie talkie, with strong encryption. My current idea is to use symmetrical block encryption, but with the key changing at regular time intervals without a ...
0
votes
0answers
27 views

Does CPA attack assumption requires the oracle to have the key?

In CPA model, we assume Eve has access to an oracle who has the correct key and Eve can send query to the oracle to encrypt in CPA the data. Assume this encryption algorithm is a plain ECB mode AES ...
0
votes
0answers
22 views

Defining correct secured channel from endpoint to server

I'm new to cryptography and have a question regarding encryption usage. The scenario is as follows: I have an endpoint hardware device (CPU - ARM A7 1.2 ghz) which runs Ubuntu 14.04. This hardware ...
0
votes
0answers
54 views

Determine encryption method with input and output

A website stores username and password in a session cookie. In the cookie the password is "encrypted" or modified in some way. Given that the "encrypted" version is always the same, I do not believe ...