0
votes
0answers
3 views

Why do some programming language API's not support private key passwords? [migrated]

Two questions: I've recently started building a basic Go web-server, and noticed that the API for starting a TLS web-server does not support a symmetrically encrypted private RSA key. The API is ...
0
votes
0answers
21 views

Fast mental encryption algorithm?

Are there any algorithms that exist to encode messages written with pen and paper such that the messages can be encrypted/decrypted mentally? For example, Bob thinks of the text "This is my ...
0
votes
0answers
25 views

Self-study Cryptoanalysis [on hold]

I found Bruce Scheier's A Self-Study Course in Block Cipher Cryptoanalysis. It starts off asking you to break older block ciphers: RC5, DES. How does one go about trying to cryptoanalyse a cipher? ...
-1
votes
0answers
10 views

BKSQ Block Cipher implementation [on hold]

has anyone a working implementation of BKSQ block cipher? (preferably in c)
1
vote
0answers
25 views

Proving membership of a group without revealing identity

I have an interesting problem for which I've failed, so far, to find an elegant solution. Imagine that a user needs to repeatedly prove to public observers that they are a member of a trusted set ...
3
votes
0answers
37 views

Simulation aborted because the adversary doesn't use the random oracle

I'm trying to construct a proof for an encryption scheme in the Random Oracle model. This encryption scheme is like a PKE scheme but with an additional function that kind of "alters" ciphertexts ...
3
votes
1answer
76 views

EdDSA Signature Algorithm - hash of secret key

Why does EdDSA use the (SHA512) hash of the secret key as the exponent for the public key rather than using the secret key value directly? This seems inefficient and I can't see how it adds any extra ...
3
votes
1answer
22 views

Source for PKCS#11 Header Files

Is there a known authoritative source for the ANSI C header files for PKCS#11 Cryptoki? Specifically, I am having trouble locating pkcs11.h, pkcs11t.h, and pkcs11f.h for v2.30 and v2.40. Are there ...
2
votes
1answer
58 views

Ideas for non duplicate cryptographically secure numbers

My Boss asked me this today. I am not a math major. He needs to generate 50 billion non-sequential non-duplicate (no collisions) cryptographically secure random numbers. I work in GO. Any ideas?
0
votes
0answers
40 views

RSA function over $Z_t^{*}$ where $t$ is prime

RSA function is defined over $Z_N^{*}$ where $N=pq$ with $p,q$ primes. A public key is a pair $(N,e)$ and a private key is $(N,d)$ where $d=e^{-1} \mod \phi(N)$. Assume that RSA function is defined ...
0
votes
0answers
42 views

ElGamal scheme attack when one message is known and ciphertexts are intercepted

Let $G$ be a finite cyclic group of order $p$ and let $pk = (g, h=g^a)$ and $sk=(g,a)$ be Bob's ElGamal public/secret key pair in $G$. To encrypt a message $m$, a random number $r$ is selected and a ...
1
vote
0answers
50 views

What happens if no final subtraction is done in Montgomery multiplication?

I'm doing Montgomery arithmetic modulo $N = 2^{255}-19$ for the Curve25519, picking $R = 2^{256}$ for Montgomery. After multiplying two numbers $0 <= A,B < N$ in the Montgomery representation ...
-2
votes
0answers
37 views

“AND” concatenation of two secure PRGs

Let $G: \ K \rightarrow \{0,1\}^n$ be a secure PRG. Define $G'(k_1,k_2)=G(k_1)\wedge G(k_2)$ where $\wedge$ is the bit-wise AND function. Consider the following ...
-1
votes
1answer
52 views

Double the key in block cipher - which approach is better?

Assume than you have a block cipher $E(k,m)$ for which the only attack exists has complexity of $2^{64}$. You consider to double the key size by either: $E'_1(k_1,k_2) := k_1 \oplus E(k_2,m)$ ...
0
votes
0answers
22 views

TLS encryption with a self-signed PKI and Python’s asyncio module

I want to enable TLS encryption with a custom / self-signed PKI for a self-contained distributed system built with Python 3’s asyncio. I’ve read Python’s ssl docs as well as several tutorials: ...
0
votes
0answers
17 views

How to multiply two field elements generated by bilinear paring map? [on hold]

I wish to clarify how to multiply two field elements generated by bilinear paring map. The following is an example where I need to multiply e1 and e2. is it possible? If yes, then how? FieldElement ...
0
votes
1answer
40 views

Extracting a WinRAR password

If I have an original file and a WinRAR password protected .rar file containing that file, than can I extract the password?
1
vote
1answer
27 views

Forgery attack on OCB

When using same nonce in OCB mode of authenticated encryption, how forgery attack can be done?
0
votes
0answers
29 views

Establish authentication

I have designed a basic authentication scheme where two nodes will mutually authenticate that other holds a shared secret. I have very limited RAM/ROM (its on uC) and bandwidth. Here it goes: ...
0
votes
2answers
42 views

HMAC-SHA1( secret key ) with header of a transmitted file

Given: an AES-128 secret key (ASecKey) encrypts a file (CBC mode). (Assume good random) Is is insecure to append (include) an HMAC-SHA1 of ASecKey to file? Purpose: The receiver can then quickly ...
1
vote
1answer
126 views

What is a “lattice” in cryptography?

There are some questions here concerning lattice-based cryptography and this kind of cryptography seems to be especially useful if quantum computers are assumed to exist. When reading such questions ...
1
vote
0answers
23 views

Machine readable, user non-readable - XML file [migrated]

I need some advice as I have been unable to find anything useful via the web - (Google search). I have used the application EventGhost so as to create a custom shell, that I run using the Windows 7 ...
2
votes
1answer
39 views

Security of MSS

I have started reading about the Merkle Signature Scheme. I am a little confused about why it is believed to be secure against quantum attacks, couldn't the hash function be attacked? What would make ...
2
votes
1answer
45 views

Block Ciphers - Standardize plain text

I need to use AES-128 to encrypt a plain text about 720 bits. Is it correct to say that – in this case – the plain text will be divided in 5 blocks of 128, the result will be equal 640 bits, and the ...
1
vote
1answer
26 views

Can I use HKDF to improve security of HMAC used with weak hash function?

I am writing a framework which encrypts/decrypts files (or streams, in general) with symmetric key using block cipher (for example, AES). To authenticate encrypted file, I use HMAC, which is ...
1
vote
0answers
17 views

RSA Signature Forgery

We all know that x509 certificates carry a signature that represents the certificate digest encrypted by the private key of the issuer. I believe that the digest is encrypted only providing one ...
1
vote
0answers
12 views

Logjam-style attack on Factoring?

We're all aware of the Logjam attack, which is known as "FREAK on discrete logarithms". Now the attack works by doing a large pre-computation step, which needs only to be done once per field and then ...
0
votes
2answers
32 views

Getting the encryption/has algorithm used for modem configuration file [on hold]

Hello guys I have backed up my modem configuration file and found the username and password is in clear text; the files shows the username and the password is : ...
1
vote
1answer
51 views

Do all attacks against PKCS1 v1.5 encryption require an oracle

As far as I know, all attacks against RSA PKCS1 v1.5 require an oracle; is that true? Or are there any other attacks against it which are able to break it without an oracle? Background: I need to ...
1
vote
0answers
29 views

HMAC for encrypted authentication token: recommended iteration number [duplicate]

In the web application I use 10,000+ iterations for hashing passwords stored in database (random salt and all). Password-related operations are not frequent enough to create a noticeable performance ...
0
votes
0answers
28 views

How can a lattice attack be applied to ECDSA signatures?

The aim is to check if it is possible to break the ECDSA cryptosystem under the following criteria. Suppose that each ECDSA signature is generated by using the GLV method for point multiplication ...
0
votes
0answers
17 views

Transform RSA private key to ssh-rsa public key [on hold]

I am generating a RSA key pair and write it to disk. I would like to transform the public key to look like this: ...
-1
votes
0answers
18 views

How to write automaticaly server generated keys into a file? [on hold]

There have a server program, which generate keys for client. I want to store these keys into a file. I implemented the server and client program in python.. When server run each time for a user, the ...
1
vote
1answer
35 views

Derive cipher IV and cipher Key using PBKDF2 with random salt?

It is said that cipher IV does not have to be secret and the only secret component of the encryption scheme should be a cipher key. Question: is it safe to generate IV using PBKDF2 function, which ...
2
votes
3answers
69 views

Establishing encryption key using shared secret

I need to establish some security on a network of 8 bit microcontrollers. very limited RAM, CPU and packet sizes. I have zeroed in on a shared secret based scheme. Setting up shared secret is out of ...
3
votes
0answers
28 views

El-Gamal and Lines on Planes

I've been thinking about a geometric picture for El-Gamal. The idea is to understand the set $\{(my^{x},g^x) \mid x \in Z_p\}$ (the set of encryption of $m$ for fixed $g$ and $y$) by taking the ...
-2
votes
1answer
55 views

Is algorithm with more than $2^{word size}$ words secure? [on hold]

Let's say we have a feistel cipher or feistel pseudo-random permutation with 8-bit function (S-box) similar to Treyfer, but with much bigger block size like 16MB. Here is example of such pseudo-random ...
0
votes
0answers
24 views

Decoding of this raw string [closed]

Using Fiddler web debugger I found the following encoded message that was sent to one of my open stock trading applications using a HTTP/1.1 GET request: The message is clearly written using ...
0
votes
0answers
22 views

RC6 and Serpent ciphers assembly reference [closed]

I'm new and starting to learn more about encryption. I'm searching google for RC6 and Serpent assembly reference but I can't find it. The reason is, for me, it is more easier like what I did also for ...
0
votes
1answer
54 views

Why is the public/private key length used in libsodium so much shorter than needed for RSA [duplicate]

Reading the libsodium source I see that is uses a key length of 32 bytes (256 bit) for private/public key encryption. For RSA private/public key encryption a key length of 2048 (or 4095) bit is ...
0
votes
0answers
30 views

what is possibility of collision in djb2 function? [on hold]

I am trying to generate unique id using djb2 hash function for string like ...
-3
votes
0answers
44 views

This paper was slid under my door and I dont know who else to ask if it has any meaning besides you guys [closed]

If this is not the proper use of this website, and I think it might not be, feel free to delete this and sorry for the use of your time. Anyways this paper was slid under my door in New York City on ...
5
votes
1answer
377 views

Dan Boneh's Cryptography lecture - problem with 802.11b

I am going through Dan Boneh's Cyprography lectures on Coursera. In Lecture 6 https://class.coursera.org/crypto-010/lecture/6 At 7:30 minutes, he discusses the problems with 802.11b design. I ...
3
votes
2answers
58 views

AES and Homomorphic Encryption

Is it possible to do the following? Input would be to generate a new AES key, encrypt the private data with that key, encrypt the AES key with the FHE key, and send the FHE-encrypted AES key along ...
0
votes
0answers
30 views

Program to generate a secure 128 bit key on a windows machine [closed]

I want to generate a secure 128 bit key to use for my TLS_PSK_WITH_AES_128_GCM_SHA256 are there any trustworthy programs I can freely download? I've been searching with google but somehow everything ...
2
votes
2answers
244 views

Why is HMAC-SHA1 still considered secure?

This Q & A http://security.stackexchange.com/questions/33123/hotp-with-as-hmac-hashing-algoritme-a-hash-from-the-sha-2-family says that the security of HMAC-SHA1 does not depend on resistance to ...
1
vote
1answer
30 views

Why in Android kernel CSPRNG state is saved?

I am reading about the security internals of Android. In the book Android Security Internals, in chapter on Cryptographic Providers, there is a para stating: On Android, CSPRNG implementations are ...
0
votes
0answers
43 views

Type of values that can be accumulated in bilinear map (multiplicative) accumulator reg.

Is there any restriction that the members to be accumulated in bilinear map (multiplicative) accumulator need to be relatively prime to P? Where P is the order of group.
1
vote
2answers
77 views

If you have a file and XOR every bit with a random bit, can you extract any information?

Say you have a file that is not random, and you XOR every bit with a random bit (not pseudo, but really random). Can someone who sees only the result extract any information from it? Obviously, it ...
3
votes
1answer
56 views

NTRU less secure than previously thought?

A new paper (https://eprint.iacr.org/2015/552.pdf) says: This makes it possible to asymptotically and heuristically break the NTRU cryptosystem in subexponential time (without contradicting its ...

15 30 50 per page