# All Questions

11 views

### Could a crypto system that uses non-FIPS crypto but then upgrades complete to FIPS be FIPS certified?

I know most people around here (including myself) are anti-FIPS, but I have a FIPS related question. Could a crypto system that is not FIPS, e.g. one based on primitives like Curve25519, achieve FIPS ...
34 views

### Calculating Multiplicative Inverse for Rijndael S-box using EEA

I am currently learning, and I'm stuck on something that I thought is very simple. On many academic sources they suggest using Extended Euclidean Algorithm to calculate the multiplicative inverse for ...
20 views

### How much pre-hashing a password increase security against brute force attack?

I am wondering how much hashing a password used as key for a symmetric key algorithm helps preventing brute force attack on crypted text. Let's assume I want to crypt text A using key B using ...
38 views

### Which is the most secure steganography technique?

Just like we have AES in crypotography, which is the most secure technique in Steganography? I am looking for a technique in which the standard image characteristic modifications it does go ...
33 views

### Can I reduce the MAC size in TLS?

The MAC size is reduced to 80 bits in truncated_hmac extension , which says "forging of MAC values cannot be done off-line: in TLS, a single failed MAC guess will cause the immediate termination of ...
21 views

### Software interface for KDF and PBKDF?

I'm working on an implementation of Krawczyk and Eronen HKDF from RFC 5869. From Krawczyk's original paper, he identifies four inputs to a KDF in Cryptographic Extraction and Key Derivation: The HKDF ...
20 views

### Philosophically elegant ways to implement a tabula recta

I'm working on a Python implementation of various classical crypto ciphers. I have various tabula recta ciphers: Vigenère, Beaufort, Variant Beaufort, Grönsfeld, Trithemius, Della Porta (not tabula ...
45 views

### Standards to be a good cipher

I'm not sure I even understand this site, but based on what I see, how can one tell if a cipher is a good one-at what level is it considered good?
56 views

### In what cases will RSA not work? [duplicate]

I know that there are cases when RSA will not work like when the number to feed into the system is greater than the modulus. I was wondering if there were any other cases when RSA won't work I looked ...
18 views

### How to choose McEliece's parameters?

At the time of this writing, there are 3 sources for parameters for the McEliece public-key cryptosystem out there. The first paper is the original McEliece paper, which only specifies ...
15 views

### Implementations of Adi Shamir's ID Based signature scheme [on hold]

Are there any open source or commercial distributions of Adi Shamir's ID based signature scheme? If yes, could you please point?
28 views

### rngtest results interpretation [on hold]

With: rng-tools version 2-unofficial-mt.14-1 Tested this C++ code: ...
33 views

### Question on Miller's algorithm (change the input m)

From the book titled " An Introduction to Mathematical Cryptography" (Chapter 5,page 322), we know that the miller's algorithm returns a function $f_P$ whose divisor satisfies div(f_P) ...
59 views

### What are the advantages of using OFB (Output Feedback Mode)? [on hold]

I have a problem with OFB mode, because I have heard that it is stronger than CFB.
47 views

### Question about keyed hash functions

Maybe the answer to my question is obvious, but I have doubt... I have noticed that hash functions are studied in two forms, keyed hash functions or unkeyed. In general, lecture notes present hash ...
52 views

### Parallel authentication of encrypted data. What AE type to choose?

I've got a system with a slow data transfer channel. Transferring a message through several channels does increase the transfer speed significatnly. AES-CBC+HMAC is good except that verifying the MAC ...
33 views

### Meaning of pseudocode “$(C, S):=$”

I've seen pseudocode of this form in the Montgomery Multiplication related theses: $(C, S) := a[j]*b[0]+C$. What's the meaning of "$(C, S):=$", or what is the real code that converted from this ...
35 views

### Does anyone still use BAN or GNY logic in practice?

I want to implement a simple protocol, and I'd like to verify it through BAN or GNY logic. I would assume that if these logics are still used that there would be some programs available that would ...
68 views

### Reasons for components of AES

I started reading "Cryptography: theory and practice" by Stinson, and I am trying to understand the reason behind the choices for the different components of AES since they seem quite arbitrary. In ...
68 views

### Working on subgroup of $\mathbb{Z}^*_p$ in practice

It is said that, given a group $\mathbb{Z}^*_p$, we can always have a subgroup whose order is prime. To this end, for a safe prime $p=2q+1$, compute $x_i^2 \bmod p$ for all $x_i \in \mathbb{Z}^*_p$. ...
83 views

### Is there any practical attack to create a printable chosen prefix MD5 collision?

I would like to create two ASCII text messages with the same MD5. Is this possible? If not, is there a similar but less strict attack that could work? Or to rephrase my last question: what are the ...
61 views

### Easy explanation of “IND-” security notions?

There are many schemes that can advertise themselves with certain security notions, usually IND-CPA or IND-CCA2, for example plain ElGamal has IND-CPA security but doesn't provide IND-CCA security. ...
36 views

### Does XTS provide random write access?

I'm trying to find a sufficient encryption mode that supports random read and write access. It seems like XTS is a perfect fit, since in my use case authentication and integrity insurance are handled ...
52 views

### Using password-based encryption as a hashing scheme

Classic scheme: Given password and hashing algorithm Generate salt Calculate ...
55 views

192 views

### Suggestion : CRC vs SHA1

I need some suggestions about the use of the CRC in my application. I need to be sure about the BIOS run by the CPU. I have a FPGA between the BIOS flash and the CPU that sniff every read performed by ...
34 views

### Why should the input value on a DPA attack be non-constant?

I actually was wondering if anyone could help me out with the following problem: Let's assume we are attacking the first SubBytes() operation on AES with the help ...
27 views

### what do you mean by cost in encryption? [on hold]

What do you generally mean by cost of an encryption algorithm? how are they computed and how to compare the cost of two encryption algorithms?
71 views

### How often does RSA-OAEP have a leading zero?

We are working with a third party vendor who is very tight lipped about their security protocols, and one of our customers who used this vendor's products is claiming that approximately one in every ...
52 views

### Theoretical Mathematics & Cryptography [on hold]

I read in Bruce Schneier's book ,"Applied Cryptography", that cryptographers need to study theoretical mathematics in order to be good at their job. Why is that?
52 views

### Is this client-side password hash scheme secure?

I want to build an app that uses client-side encryption for storing encrypted data on the server. A user-specific master key would be used, so to easily share it between devices a encrypted version of ...
10 views

### Creating disk image of encrypted disk [migrated]

I'm Fedora 21 user for some time and I'd like to create disk image to escape installing everything over again when something fails. I have encrypted storage and that fact makes me wonder. How do I do ...
65 views

### Does authenticated encryption add any protection to a signed digital envelope?

The general scenario of hybrid encryption is to use public key cryptography for the exchange of a one time session key that can be used for the encryption of the plaintext with a symmetric encryption ...
35 views

### Cryptographic Disk wiping with quantum random data?

I was thinking about using 4 Quantum Random Number Generators working at the same time to create a secure disk wiping system. Basically feed the random bits into to an approved DRBG then through an ...
3k views

### “123456” and “password” as crack standards

I know that when we encrypt, we use standard encryption technologies and to store data it's often stored as a hash. By encrypting a common password, for example "password" using ...
49 views

### What is SRP-Z from?

The Stanford license for SRP says: Broader use of the SRP authentication technology, such as variants incorporating the use of an explicit server secret (SRP-Z), may require a license; yet ...
3 views

### Why do some programming language API's not support private key passwords? [migrated]

Two questions: I've recently started building a basic Go web-server, and noticed that the API for starting a TLS web-server does not support a symmetrically encrypted private RSA key. The API is ...
41 views

### Fast mental encryption algorithm? [duplicate]

Are there any algorithms that exist to encode messages written with pen and paper such that the messages can be encrypted/decrypted mentally? For example, Bob thinks of the text "This is my ...
18 views

### BKSQ Block Cipher implementation [closed]

has anyone a working implementation of BKSQ block cipher? (preferably in c)
72 views

### Proving membership of a group without revealing identity

I have an interesting problem for which I've failed, so far, to find an elegant solution. Imagine that a user needs to repeatedly prove to public observers that they are a member of a trusted set ...
83 views

### Simulation aborted because the adversary doesn't use the random oracle

I'm trying to construct a proof for an encryption scheme in the Random Oracle model. This encryption scheme is like a PKE scheme but with an additional function that kind of "alters" ciphertexts ...