1
vote
1answer
49 views

Perfect secrecy of a crypto system

Suppose we have the following crypto system: $P = C = K = \{0, 1, . . . , n − 1\}$, $E_k(x) = (x + k) \bmod n$ and $D_k(y) = (y − k) \bmod n$. Prove that the crytosystem has perfect secrecy. Perfect ...
2
votes
1answer
56 views

Possible hashing scheme

Plaintext(binary) : 10101100 //very short for easy understanding Suppose we have 4 predefined schemes/functions, rotate (101 -> 011) flip (1101 -> 1011) exchange (11011 -> 10111) stretch (1100 -> ...
0
votes
2answers
156 views

What would be the best plain text Cryptography method without the use of a computer? [closed]

What would be the best Cryptography method without the use of a computer? This could be a list of the current options available, that could be used without the use of a computer ...
4
votes
1answer
93 views

Dancing confusion with Daniel J. Bernstein's stream ciphers

I know of Salsa20 which won the ESTREAM competition. This is dated of 25 Dec 2007. There is also the ChaCha20 stream cipher (cr.yp.to/chacha.html). This claims to increase the amount of diffusion ...
1
vote
1answer
138 views

fully homomorphic encryption (FHE)

Please, I would like to find some hints or solution to my following problem, I would appreciate your assistance to walk with me throughout the solution Given fully homomorphic encryption (FHE) ...
7
votes
1answer
151 views

Why is authenticated CFB mode insecure?

I read that the following adaptation of the CFB block cipher mode into an authenticated mode is prone to chosen plaintext attacks, yet Im still unsure how to prove it: Let $P_1,P_2,\ldots P_n$ be the ...
1
vote
0answers
87 views

How represent message in Menezes–Vanstone elliptic curve cryptography

I ask about represent message in Menezes–Vanstone elliptic curve cryptography I now encrypt function as follow $C_1 = (M_1 * K_1) mod\ P$ $C_2=(M2 * k_2) mod\ P$ My question is about how much the ...
1
vote
1answer
100 views

Block cipher to encrypt 8 bytes/64 bits - Use 64 or 128 bit cipher?

Here's the problem: I have a transport stream that I have been requested to encrypt between the transmitter and receiver. The data size is at most 8 bytes so it seems I can only use ECB as I only have ...
0
votes
1answer
63 views

“Kernel attack” on MinRank — why do we guess $\left\lceil \frac k n \right\rceil$ vectors?

The kernel attack on MinRank is described here (page 5). My question refers to this line: Note that if $m = \left\lceil \frac k n \right\rceil$, the system essentially has only one solution ...
-2
votes
0answers
45 views

Encryption key input by a user [on hold]

I was looking for some research papers where the security scheme is using 'user input' key method (but could not find). I mean, some approaches where user will be the one who will put keys for ...
4
votes
2answers
209 views

Extending pseudorandom generator by one bit using exclusive-or of previous bits

Is it possible to have a pseudorandom generator that extends its output by 1 bit by simply appending the exclusive-or of all the previous bits? I know the output of a pseudorandom generator is ...
0
votes
0answers
5 views

How to replicate GPA's Sign and Compress option on command line in Windows [migrated]

As the title says, I need to replicate GPA's "Sign and Compress" option on the command line. I'm trying to automate some encryption of files for submission to a bank and the instructions they gave me ...
5
votes
2answers
263 views

Shannon confusion and diffusion concept

I read the document(not the whole document) from Shannon where he speaks about the concepts of confusion and diffusion. I read in many places(not in the document but around the internet) that ...
5
votes
3answers
382 views

What is the difference between uniformly and at random in crypto definitions?

Very often in the description and analysis of a cryptographic protocol there is a need for a an element $k$ that is sampled uniformly AND at random. Is there a redundancy in the definition with ...
5
votes
3answers
680 views

Why does the recommended key size between symmetric and assymetric encryption differ greatly?

In various articles it is mentioned that for secure communications, the recommended key sizes are 128-bit key size for symmetric encryption (which makes it $2^{128}$ possible keys?) and 2048-bit key ...
-2
votes
0answers
38 views

Is cm signed signature verification considered “slow”

I put slow in double quotes because I'm no expert in encryption (I heard that "cryptography in general is inherently slow"). Just trying to gauge and see how and where I can increase performance of my ...
0
votes
0answers
30 views

request for data to test deterministic ecdsa signature algorithm for secp256k1

I’m implementing the RFC 6979 procedure to compute a message signature. I want to test my program on the secp256k1 elliptic curve. Note the “k” in secp256k1, i.e. the Koblitz curve. If you have the ...
2
votes
1answer
132 views

How to customize a standard encryption algorithm?

I want to modify and customize AES encryption algorithm and develop a variant of it. What factors should I consider so that it does not become weaker? What skill sets would be required to undertake ...
16
votes
4answers
7k views

Why is AES resistant to known-plaintext attacks?

At least it's my understanding that AES isn't affected by known-plaintext. Is it immune to such an attack, or just resistant? Does this vary for chosen-plaintext?
4
votes
1answer
54 views

At what point does passphrase strength match the strength of the cipher?

Let's say that I have an ordinary hard drive encrypted with VeraCrypt 1.0e full disk encryption and implementing: -AES -RIPEMD-160 Hash Algorithm Now let's say that for an arbitrary machine, the ...
1
vote
1answer
69 views

Malleability of homomorphic encryption

El Gamal is a malleable homomorphic encryption system, so is Rabin. Are all homomorphic encryption systems malleable? Or are there any that are not malleable? Thanks!
0
votes
0answers
31 views

electronic voting system [migrated]

Was looking at cryptocurrency and how, as a non techy, to get involved when I began thinking about the security of it being developed to undermine the stranglehold bankers have on economy and the ...
-2
votes
1answer
64 views

Starting an essay on cryptography, 1st year college [closed]

I'm starting an essay on cryptography for my computer science class. I don't really know where to start so I wonder if there are some pre-made stuff for beginners that are explaining what cryptology ...
1
vote
1answer
89 views

N way collision of hashes

For a collision $H(A_1) = H(A_2)$, the number of queries is $T^{1/2}$ where $\log_2(T)$ is length of hash output. Then, what would be the number of queries requried to find an $n$-collision ($H(A_1) = ...
0
votes
1answer
176 views

Implementing a web app where the server cannot decrypt its own data?

I'm a cryptography novice, but I think that the world needs to move towards an "encrypt everything" mentality as much as possible. As a result, I've been thinking a lot about ways to build a web app ...
0
votes
0answers
72 views

How do I find a random BigInteger smaller than another random BigInteger? [migrated]

How do I Select a random element α ∈ Z∗p? P is a random 1024 bit prime BigInteger. Here is how I find BigInteger p: ...
3
votes
1answer
503 views

How can I calculate the time complexity of modular arithmetic?

I'm doing modular arithmetic in a Java program, and I want to calculate the time complexity of the individual operations. $$ c= a · b \bmod n $$ $$ m = a^{-1} · b \bmod n $$ How do I get an ...
2
votes
2answers
6k views

OTP from Sony BIOS password recover

From Dogbert's blog: Sony has a line of laptops ("Vaio") which compete mainly in the high value market segments. They implemented a master password bypass which is rather sane in comparison to the ...
1
vote
1answer
51 views

RSA Protocol behind Yaksha Security System

So I'm reading over the Yaksha Security System and see it is based on the RSA cryptosystem and a centralized server, easy enough. What I'm slightly confused on is the math behind the related keys. It ...
2
votes
0answers
95 views

Recovering El Gamal secret key from signatures [duplicate]

Assume out of a set of ElGamal signatures, I've discovered that two have the same y i.e. $signature_{1}$ on $m_{1}$ = $(y,s_{1})$ and $signature_{2}$ on $m_{2}$ = $(y,s_{2})$. The public keys for ...
-1
votes
0answers
46 views

Security considerations on using key derivation to create one-time keys for block ciphers

I'm planning to do some block encryption with AES and Blowfish (both with 256 Bit keys) chained. Master key generation: A 32 byte long persistent (over many years) master key is derived from a ...
0
votes
1answer
82 views

Key management protocol for end-to-end security on Advanced Metering Infrastructure

I am currently working on a research on end-to-end security implementation for Advanced Metering Infrastructure (AMI). Pardon me if I a bit off topic or not asking the right question as I am ...
-2
votes
0answers
25 views

Verifiable random function basic example [on hold]

I've decided to take a closer look at verifiable random functions. The concept is clear for me, but I'm looking for an easy-to-understand example for my presentation's original definition. So, in ...
-1
votes
0answers
36 views

What is a good way to program the finding the determinant of a 2x2 matrix? [migrated]

I have a good understanding of how to do the Hill cipher on paper but putting it into program form is somewhat of a problem. Finding the the determinant is the thing I'm having problem with. On ...
2
votes
3answers
3k views

RSA Proof of Correctness

Can anyone provide an extended (and well explained) proof of correctness of the RSA Algorithm? And why is it needed? I can't say that this or this helped me much, I'd like a more detailed and newbie ...
0
votes
1answer
61 views

Bae64 with shuffled alphabet

I have a base64 'cipher' text, I know that in clear text is a hidden xml document (I do not know nothing about its structure), but the base64 aplhabet was somehow shuffled. Is there any smart way, how ...
-2
votes
0answers
26 views
1
vote
1answer
64 views

Why do we have fixed output length in the algorithm SHA1

Why do we have fixed output length in the algorithm SHA1 . is there any explanation about that
0
votes
0answers
24 views

How to determine which key derivation function used for password?

Suppose an attacker collected a password hash file. After performing rainbow tables/dictionary attacks they choose brute force attacks. So they try guessing as many passwords as they can by running ...
0
votes
0answers
17 views

Generate CA with aes256 passphrase protected DSA key

I want to create my own Certificate Authority with an DSA key. I figured out to create it with: ...
0
votes
0answers
27 views

S-Boxes and SP-Network

I work on an exercise and I have to study functions as : $ f : \mathbb{F}_q \rightarrow \mathbb{F}_q$ with $q = 2^n$ which can define a S-Box for SP-Networks. There is a question that I can't answer ...
0
votes
1answer
52 views

Looking for a secure PRNG that I can implement in hardware

I'm trying to implement a (sort of) simple PRNG in hardware for fun. My idea would be to allow a user to enter a key using a keypad (or some dip switch settings that can be set and hidden) and to ...
-2
votes
0answers
31 views

Best steganography/alysis practice for total beginner [closed]

Which method would be more beneficial to learning: A. Create my own labs by creating my own steganograms, analyzing them too look for the pattern changes etc. or B. Seek out pre-existing files where ...
0
votes
1answer
61 views

Blowfish ECB mode: Tools for known-plaintext attack?

I'm currently dealing with multiple blowfish-encrypted files that share the same key. All are encrypted using ECB mode judging from their appearance. I don't know what the key is but I know 64 byte ...
1
vote
1answer
49 views

RSA-blind signatures vs. DSA-blind signatures

I see that the RSA blind signature scheme tends to be implemented more often than others, e.g., DSA blind signatures. Isn't the RSA blind signature scheme a 'lesser' scheme, if you may, compared to ...
0
votes
0answers
51 views

Recovering a constant salt for MD5 [duplicate]

I have STRING and MD5(STRING+SALT) for any infinitely many STRING's. Is their any way that I can recover the SALT itself? (SALT is constant) I actually know SALT, but this is an intellectual exercise. ...
0
votes
1answer
79 views

Probability of factoring keys as a function of bit length

kinda new here, I had a question pertaining to someone being able to factor one's RSA keys through the GCD. Anyways the question goes that there are two people: A and B. A makes his/her private key as ...
0
votes
1answer
89 views

What are the potential (major) flaws in this security scheme?

It’s been a few years since I read anything involving crypto. I’ve come across this scheme and I wonder how secure it is: Alice generates an RSA keypair (we assume Alice is using proper random ...
1
vote
1answer
50 views

Reduced message expansion in NTRU

In the original NTRU proposal from 1998, it says on page 16: It may be worth mentioning, though, that there is a simple. masking technique that can be used to significantly reduce message ...
1
vote
0answers
55 views

How does Schnorr signature actually work?

I'm trying to get a grip on how Schnorr signature works. Suppose Alice sends Trent a tuple $(P, M)$, which contains a payload and a message to be signed by him. She then passes the certificate to Bob ...

15 30 50 per page