0
votes
1answer
7 views

DES-X , computation load and storage

The passage said that ther computational load to attack DES-X can be reduced to approximately 2^(56+64)=2^120 steps,and the storage of data sets should be 2^64. But I can't figure why it is time ...
0
votes
1answer
18 views

What can be learned from the ciphertext of LibSodium's crypto_box_detached()?

LibSodium, (https://github.com/jedisct1/libsodium), has a function crypto_box_detached() which does authenticated encryption using the public key of the recipient ...
0
votes
1answer
11 views

Does the size of a SSH ECDSA key determine the hash algorithm?

I am a bit lost in understanding what I read on authentication, signature, etc. Is the size of the ECDSA keys produced by ssh-keygen -t ecdsa -b 256 linked to the ...
0
votes
0answers
6 views

Does OpenSSL support XTS?

I have OpenSSL 1.0.1i 6 Aug 2014 and I am experimenting with various settings. I tried using aes-256-xts but all I get is this: ...
0
votes
1answer
29 views

Is AES's parity key-dependent?

Is the parity of the permutation of the set $\{0,1\}^{128}$, defined by AES encryption for a certain fixed key, dependent on this key? DES, and any pure Feistel cipher, has even parity for any key. ...
-1
votes
0answers
18 views

A simulation for the BB84 quantum key distribution protocol

I am looking for a Python/Java/C/C++ (any programming language, actually) simulation for the BB84 qkd protocol. I am very new to this field and I just want to better understand how it works and maybe ...
1
vote
1answer
14 views

Recover plaintext in passive attack of RSA of coprime public key

I have a situation in RSA like this. Charles sends same message $m$ to Alice and Bob encrypted with $e_A$ and $e_B$ respectively. It happens that he they are under same modulus $n$ and $gcd(e_A, ...
0
votes
1answer
21 views

How are salt values more secure?

If a database stores password encrypted by using salt values, how are they stored? I read somewhere, it uses timestamps. So is the timestamp also stored? How about when a user tries to login next ...
-1
votes
0answers
20 views

Mounting internal FileVault encrypted drive in 10.9 OS X in Recovery Mode without unlocking it; Passware brute-force [migrated]

I encrypted my internal hard drive with FileVault a while ago on Lion such that it prompts for the disk password when I restart the computer and recently upgraded to Mavericks on my MBPro Retina. It ...
1
vote
1answer
74 views

Operation which needs much computing power to be created, but just a little to be solved?

Does somebody know a cryptographic/mathematic operation, that needs much computing power to be "encrypted"/"created" but doesn't need much power to be "decrypted"/"solved"?
-1
votes
0answers
32 views

How to compute 3P from elliptic curve where P is (28, 8) [on hold]

Consider the elliptic curve E31(1,1): Calculate 3P, where P = (28,8).
-2
votes
0answers
27 views

How to find secret key and public key for ECC cryptosystem?

Develop an ECC cryptosystem based on E31(1;1), point G = (0,1) which has order 32. nA value of 6. What is the secret key? What is the public key?
-1
votes
0answers
14 views

What are the advantages of Certificate Authority and Key Distribution Center over each other?

I want know difference among them. What are advantages/disadvantage of one on other?
0
votes
0answers
15 views

Smart card minidriver: CryptAcquireContext failed with error 0x80090016 (NTE_BAD_KEYSET) [on hold]

I encountered a problem just like: https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/838037c5-2480-4ffd-8524-c8c2b16c620c/minidrivers-problem-in-windows-7?forum=windowssecurity I wrote a ...
3
votes
2answers
94 views

Secure way to derive separate encryption and MAC keys from a single master key?

I want to derive a 256 bit encryption key and a 256 bit MAC key from a single 256 bit master key for an authenticated encryption scheme. I was considering the following construction to derive the two ...
2
votes
3answers
84 views

Format Preserving Encryption for 32 or 64 bit plaintext values

I am looking for a Format Preserving Encryption implementation to apply to either a 32-bit or a 64-bit integer. It looks like AES/FFX mode is just what I need in terms of established security ...
-1
votes
1answer
34 views

Convert message to polynomial NTRU

How to make a message into a polynomial? I saw many answers to this question and yes, i know that here are some questions. But i did not get it. I think that i am making some mistakes. I took a word ...
4
votes
3answers
438 views

What is the use of Mersenne Primes in cryptography

There is an international search for Mersenne Primes. The project is huge. But what is the use of Mersenne Primes in cryptography? Do they have any other properties other than the $2^n-1$ form?
-2
votes
0answers
31 views

How to guess the encoding of a string? [on hold]

I am trying to decode a string without knowing the encoding. The encoding is probably some industry standard, but I haven't been able to recognize patterns. Where would be a good place to start on ...
0
votes
0answers
13 views

Computing the redundancy of language for a Vigenère cipher with m=5

Redundancy of L = 1- Entropy of L/ log base 2 {P} The Redundancy of L is given by 1 minus the Entropy of L divided by log base 2 of the Cardinality of the Plaintext space. Could someone advise me how ...
1
vote
1answer
45 views

Where is defined the fact of having a “learning” and “challenge” phase in cryptography proofs?

I've read Bellare and Rogaway 2004 and Shoup 2004 about game-based cryptography proofs, but I lack precisions about how should be built the "learning" and "challenge" phases, since my games will ...
4
votes
1answer
56 views

How Secure is a Pronounceable Password? In means of entropy

There are some strong studies which support the use of pronounceable passwords and multiple tools which provide generation of such passwords. According to this question the entropy of a password ...
0
votes
1answer
53 views

Prepending random data to encrypted file

If random data is prepended to a file encrypted with GNUPG's symmetric encryption, how may an attacker find out if the input file is deliberately corrupted or the passphrase is wrong? If it is not ...
0
votes
1answer
44 views

Proof that counter mode of operation and CBC mode are CPA secure when pseudorandom permutations?

I know counter mode can be CPA secure, when used with block ciphers modeled as random permutations. If we use pseudo-random permutations, is it still CPA secure? Is there a proof? How about CBC ...
0
votes
1answer
43 views

Encrypt a file for random access but only after an initial read of the whole file

I'm symmetrically encrypting a file (using a random salt and a user supplied password with PKCS5S2, i.e., nothing special) and I need to be able to access it randomly. Therefore I'm using a stream ...
-1
votes
1answer
53 views

What's algorithm encryption ?Twofish or AES [on hold]

I have one ciphertext but i do not know algorithm it . i know it's AES or Twofish what are your suggestions ?
1
vote
2answers
42 views

Does google's Crypto.JS AES encryption use PBKDF2 as default?

Does google's Crypto.JS AES encryption use PBKDF2 as default? Some references, but I can't figure out the answer myself: https://code.google.com/p/crypto-js/#The_Cipher_Algorithms ...
1
vote
0answers
44 views

Crypto Libraries with Pairing Based Functions for Academic and Educational Use? [on hold]

I am aware of some crypto libraries containing functions and tools for pairing based cryptography. However, I want to have a more extensive list of them. My ultimate purpose is to implement some of ...
1
vote
0answers
81 views

To prove $r_2$ is a uniformly at random value in $Z_n$, where $r_2=r_1 . m$

$m$ is arbitrary value in $Z_n$, where n is RSA modulo. Then we do: $r_2=r_1 . m (modn)$, where $r_1$ is a random value such that $r_1\in Z^*_n$. ** Question(1): is $r_2$ a uniformly at random ...
2
votes
2answers
164 views

Small Prime Difference in RSA

In RSA, the $p$ and $q$ should be randomly generated, and they are the same size. The difference between $p$ and $q$ should not be small. Suppose that $u=|p-q|<20$ and $p \times q ...
0
votes
0answers
17 views

Verify signed file using GPG by passing in signature hosted online rather than stored locally (i.e. in keyring)? [migrated]

Is it possible to pass the URL of a GnuPG signature when executing a verify query against a signed file? For example, instead of: gpg --verify file.txt Is there ...
1
vote
1answer
74 views

Protection of Elliptic Curve Implementations against side-channel attacks [on hold]

Recent fast elliptic curve implementations, for example a presentation at Eurocrypt 2014 (earlier presentation slides, the paper) talks about protection against only timing attacks. Why only timing ...
3
votes
2answers
114 views

Does a stream cipher require a KDF when it's key is variable length?

RC4 has a variable length key. Is it still necessary to use a key derivation function, such as PBKDF2, to initialize it? Would using a single character password weaken it's output when compared to a ...
0
votes
1answer
49 views

Security of chameleon hash functions

With the knowledge of the trapdoor, we are able to compute the same digest for differents messages. I've read that given two messages $m$, $m'$ and two numbers $r$, $r'$ such that ...
3
votes
1answer
142 views

ZIP 2.0 encryption bruteforce attack

I have an old sourcecode backup from my DOS days stored in a ZIP 2.0 encrypted archive, but I lost the password. The password was written on a paper slip, but I remember that it consisted of 30+ ...
4
votes
1answer
60 views

Can we run a probabilistic function on ciphertext with Functional Encryption (or Attribute Based Encryption)?

In the definition of functional encryption ($FE$): $FE.Setup(1^k)$ takes as input the security parameter $1^k$ and outputs a master public key $fmpk$ and a master secret key $fmsk$. $FE.KeyGen(fmsk, ...
1
vote
1answer
58 views

problem with “one time pad” [on hold]

I am a french student and I read the post on the forums (How does one attack a two-time pad (i.e. one time pad with key reuse)?). I need your help if possible. I 'm 11 encrypted messages , all ...
1
vote
0answers
45 views

Does the transposition cipher have a network application?

So I'm reading a chapter in my networking book and it talks about substitution and transposition ciphers (Transposition Cipher Wikipedia). I know that most network security uses public key or ...
-1
votes
0answers
44 views

How do you perform frequency analysis to break Vigenere cipher programmatically?

I am trying to write a program to which when provided a ciphertext(maxlength - 200) and a key length(maxlength - 40), gives a plaintext as output from a possible set of plaintexts. By possible set of ...
-1
votes
0answers
65 views

Decryption of .png and .jpg files [closed]

I'm trying to modify graphic assets of the software I'm using (for aesthetic puroposess, I guess it's hard to do something harmful with graphic assets) but developer encrypted them. I'm not sure why ...
1
vote
1answer
62 views

Why can't garbled circuits be reused?

There are a bunch of papers do research on resizable garbled circuits. But I wonder why garbled circuits cannot be reused? For example, the constructor constructs a garbled circuit of "AND" like ...
2
votes
1answer
72 views

Implementation of garbled circuits using RSA

I was just reading these notes on garbled (Yao) circuits and I just stuck trying to figure out how an implementation of Table 1 would work using RSA encryption. In RSA the public key is (n,e). So for ...
3
votes
1answer
95 views

What does “learnable with oracle queries” mean?

I came across the following quotes in reading papers on obfuscation (1, ibid, and 2): The next result follows from the fact that point functions are not exactly learnable (since a uniformly chosen ...
0
votes
1answer
32 views

MD5 update functions

In the hashlib module in python is a function called m.update() where m is a ...
0
votes
0answers
26 views

Arranging Vigenere Cipher into columns [migrated]

As I understand if you arrange a Vigenere cipher into columns you can use the Index Of Coincidence to find out the key length. I'm struggling to write an Algorithm that would take a piece of text and ...
0
votes
0answers
60 views

How can I break this cipher? [closed]

I am currently trying to break: +VZ7ZVcKPavGh4iGArNy and +VZyY1sBOazFh4COBrB2 I have a known plaintext that is: 378734493671000 which encrypts to: +VZyZlAHP6HAgoaPBrBz Is anyone able to explain how ...
0
votes
0answers
52 views

initiate the elliptic curve

when we consider a curve in a prime field for example Weierstrass form and want to initiate it in Miracl,we should give these inputs for initiate curve: ebrick_init(&binst,x,y,a,b,n,window,nb) ...
0
votes
0answers
53 views

Existential Unforgeability of signature scheme against Adaptive Chosen Message Attack

While reading a literature on signature schemes, I came across the concept of Existential Unforgeability of signature scheme against Adaptive Chosen Message Attack. Can anyone point me to the paper ...
0
votes
1answer
31 views

blowfish ecb with openssl doesn't give the expected result

I do the following via the Linux CLI: ...
0
votes
1answer
38 views

HMAC_DRBG Generate Process: requesting N bytes at once different from requesting N bytes in total?

Am I correct in assuming that HMAC_DRBG would return different results if I, e.g. first request 4 bytes followed by a request of another 4 bytes instead of asking for 8 bytes at once? It seems that ...

15 30 50 per page