# All Questions

22 views

### Should I use a key store to keep my symmetric keys

I'm maintaining an application which handles several keys to encrypt/decrypt information. Some keys are used to encrypt text (user passwords, some sensitive data in the db, etc). Some other keys are ...
39 views

### Java: How to handle authenticated encryption for big files

First I need to mention that I can't use BouncyCastle to implement this solution. I have to encrypt files into the file system. Those files are not going to be tranfered over the wire to any other ...
19 views

### if using cbc+hmac dealing with small size of data(less than 128bit) , will it cause any problem?

if use AES-cbc,HMAC-SHA256, and there is some txt needed to be enc, and I divide this txt into small packages with variable length, then enc them. some of these package can be less than 128bit. Is ...
28 views

### Elliptic curve trapdoor function without modular arithmetic?

From what I understand, an elliptic contains a set points satisfying the equation $y^2=x^3 + ax + b$ together with the point at infity. It seems clear how multiplication with a scalar and a point ...
31 views

### How many characters per block in an El Gamal ECC cryptosystem?

While I look for how many characters that can be encrypted using the The elliptic curve ElGamal cryptosystem. of each block found for these lines. But I can not understand Actually in our case we ...
27 views

### Find the encryption method from the cipher and plaintext [on hold]

I have been given iogdaybDfD which is a cipher of the word narcolepsy. I need to find the type of encryption that has been applied to narcolepsy to encrypt it to iogdaybDfD. Could anyone advise on how ...
16 views

### CP-ABE: structure of the secret key SK

I am working on Ciphertext-Policy Attribute based Encryption (CP-ABE) and I need to understand how a secret key looks like. For example, assume that the universe of attributes is defined to be ...
38 views

### Interactive assumptions not falsifiable?

Can someone explain why an interactive assumption is not falsifiable? Maybe I'm misunderstanding what the statement means, but isn't even a non-interactive assumption interactive, but just with a zero ...
21 views

### Java RSA/ECB/PKCS1Padding encryption with .NET [on hold]

I need to encrypt a password on a web site developped in .NET using a public key. The public key is delivered through a Java web service with the information: The key is a RSA key to be used with ...
28 views

### proving the security of 1 out of 2 oblivious transfer using AND function

Hello ladies & gentlemen, I need to improve the security of 1-out of 2 oblivious transfer using AND function method with a given info. use one-out-of-two oblivious transfer as building block, ...
24 views

### number theory and cryptographic hardness assumptions [on hold]

Let p be a prime and e>=1 an integer. Show that the totient(p^e)=p^(e-1)*(p-1). Let p,q be relatively prime. Show that the totient(pq)=totient(p)*totient(q). (Dont use chinese remainder).
47 views

### Key generation in Digital Signature Algorithm

In DSA, one needs to generate two primes $p$ and $q$ such that $q$ is $256$-bit and $p$ is $3072$-bit and $p-1$ is a multiple of $q$. Question: How to generate such $p$ and $q$. Attempt: First, use ...
76 views

### Collision resistant hash functions

Let (Gen1,H1) and (Gen2,H2) be two hash functions. Define (Gen,H) so that Gen runs Gen1 and Gen2 to obtain keys s1 and s2, respectively. Then define Hs1,s2(x)=Hs1(x)||Hs2(x). a) Prove that if at ...
39 views

### Show CBC-MAC construction isn't secure [on hold]

Show that the basic CBC-MAC construction is not secure when used to authenticate messages of different lengths.
48 views

### RSA with PKCS#7 and DES-EDE3-CBC (and padding)

I have this smime file ...
54 views

### fully homomorphic encryption (FHE)

Please, I would like to find some hints or solution to my following problem, I would appreciate your assistance to walk with me throughout the solution Given fully homomorphic encryption (FHE) ...
30 views

### Importance of ShiftRows in AES

If ShiftRows is excluded from AES, then an attacker can attack the modified AES by simply treating $128$-bit input as $4$ $32$-bits blocks. The attacker can attack these $4$ blocks separately. ...
25 views

### Secure symmetric encryption algorithm for any-size base62 data

I am searching for a secure algorithm to encrypt base62 (or any other base) data for ids in urls. It should feature: No blocksize etc, limiting the length of the message to a factor of n If you ...
62 views

### Decrypting A Cipher Text without knowing the key or plaintext

i'm new to cryptography and i am doing a research based on cryptanalysis of vigenere cipher. If i have a ciphertext which is encrypted using vigenere cipher, is it possible for me to decrypt the ...
49 views

### How does chosen ciphertext attack on Elgamal work?

Can it be proven that attacker can obtain the full message if he knows some plain-ciphertext pairs?
59 views

### Complexity to find an preimage of a hash function

Suppose a hash function based on Merkle-Damguard construction. Its compression function is given as $H_i=E_{m_i}(H_{i-1})$, where $E_{m_i}()$ denotes the encryption of an ideal block cipher with ...
67 views

### CCA security of a system that splits messages and encrypts each packet

Propose a symmetric key based crypto-system for implementing a secure email system. This system is based on AES and CCA secure. Suppose that you have to encrypt a large message and that this message ...
29 views

### The Inhomogeneous Short Integer Solution (ISIS) problem with a clue

The Inhomogeneous Short Integer Solution (ISIS) problem is as follows: given an integer $q$, a matrix $A \in \mathbb Z^{n\times m}_q$, a vector $b\in \mathbb Z^n_q$, and a real $\beta$, find an ...
25 views

### Where can I get a security audit for a crypto app storing files on the cloud? [closed]

We are completing a new app the encrypts files (AES 26-bit) prior to sending them to cloud storage services (ex. OneDrive, Google Drive, DropBox, etc.). We want to find a consultant who can do a ...
70 views

### Client encrypts AES key and send it to other clients using public key (RSA) and server?

i have implemented AES and RSA methods myself. The server generates the AES secret key and encrypts it with every new client's (public key, modulus) then it is sent to that client, the client then ...
36 views

### Blowfish ECB mode: Tools for known-plaintext attack?

I'm currently dealing with multiple blowfish-encrypted files that share the same key. All are encrypted using ECB mode judging from their appearance. I don't know what the key is but I know 64 byte ...
18 views

### Hokkaido (proof-of-Work system) and pseudo-random permutation table

This question is regarding a proof-of-work system suggested in this article "Cryptology ePrint Archive: Report 2005/356". The outset goal of the Hokkaido algorithm is to provide a task to somebody's ...
39 views

### ASP.NET MembershipProvider uses passwordSalt when encrypting [migrated]

I've a question about the ASP.NET Membership (from .NET 2.0), and more specifically the way it encrypts passwords (when you choose to encrypt them, and not hash then), and the way it verifies them. I ...
36 views

### Permutation parity after cycle-walking

Let $E$ be a random even permutation of the set $\{0\dots n-1\}$. We construct a permutation $P$ of the set $\{0\dots m-1\}$, for some $m\le n$, using cycle-walking; that is, computing $P(x)$ is as ...
14 views

### openssl - Recommended way to encrypt and sign S/MIME messages using openssl

OpenSSL has two command line tools, cms and smime, that can encrypt and sign S/MIME messages. Both can specify ciphers and ...
9 views

### java.security.spec.InvalidKeySpecException and Inappropriate key specification error in java program [migrated]

As a part of project implementation,I have done: 1. Generete DSA keys 2. Encrypt the private key using AES 3. Save into the file 4. Open the file and read the encrypted private key 5. I tried to ...