# All Questions

44 views

### Message recovery using CBC

Take for example that alice has a message m that is 412 bits long, which she encrypts using AES-128 (which has a 128-bit blocksize) in CBC mode with a symmetric key k to produce ciphertext: c = Enc k ...
31 views

### How about a homomorphic integer sorting in a MPC context?

I want to implement the ATV-FHE scheme as described by Adriana López-Alt, Eran Tromer, Vinod Vaikuntanathan: On-the-Fly Multiparty Computation on the Cloud via Multikey Fully Homomorphic Encryption ...
117 views

### What are the roles of the simulator in simulation based proofs

I'm trying to better understand simulation based proofs in the UC model - but the guidelines to construct a simulator confuse me. To my understanding, the simulator is activated in two ways: ...
51 views

### Brute force attack multiple stream cipher

Assume that a scheme used to secure a specific system $Π=(Gen,Enc,Dec)$ which is thought have indistinguishable multiple encryption in the presence of an eavesdropper. For any adversary $A$ that can ...
16k views

### AES 256 Encryption - Is it really easy to decrypt if you have the key?

So this might sound like a crazy question but bear with me for a minute. I can't find any info on the internet and so am here, although this might have been a good place to start. I've recently ...
35 views

### How to verify a signature with openssl methods from the ECDSA class?

I'm trying to verify my signature like I explained in my question before. But I have some problems to program my own verification without the verify methods of openssl. Therefore I'm going on to use ...
33 views

### How does non-linearity (S-box) add security to AES?

I'm trying to understand how AES guarentees security. One of the named points on the web is that AES uses a non-linear step (the SubBytes step). But how exactly does the Rijndael key schedule add ...
58 views

### Key Derivation Function (KDF): Can a key derived from KDF be considered as a secure key?

Consider a case where we have a master key MS that is used in pseudo-random function to generate a set of pseudo-random values. Then we use key derivation function to derive a key from each of ...
7 views

### how do I implement identity-based signature scheme using PBC library [migrated]

i want to implement cha cheon id base signature scheme using pbc library....i'm very new to pbc library can any one help me.. and i'm very new to stack exchange please forgive me if I post anything ...
29 views

### Trying to determine what encryption method was used [on hold]

I have a database I'm trying to decode. The database is an 1997 Microsoft Access database, and the program itself was written around 2001 in Visual C++. The database is used for decoding VIN numbers. ...
26 views

### Implementing RSA in C# when Public Key is Known [migrated]

I'm trying to implement an RSA encryption function, but I'm new to cryptography. I know the public key and have data to encrypt, but I can't get the implementation correct in C#. I've tried using: ...
46 views

### What followed findings of A. Lenstra et al. concerning shared factors of practical RSA moduli?

A. Lenstra et al. had a paper in 2012 "Ron was wrong, Whit is right", in which one reads: "What surprised us most is that many thousands of 1024-bit RSA moduli, including thousands that are contained ...
47 views

### Taking half of a X bits hash key as secure as using a X/2 bit hash function?

This question comes from a (nitpicking) comment by me in this SO question. I said that using the half of the output from a 256 bit hash function is worse than using a 128 bit hash function. My ...
39 views

### How to use a stream cipher to sign a message?

Are there known constructions which allow to sign a message M (let's say it will be sent as clear text) using a stream cipher C and a symmetric secret key K? So, we have M, C, K and we want to send ...
66 views

### Help defining a shift cipher mathematically

For an assignment question, I am trying to prove formally that double encryption with two keys by the shift-cipher encryption function results in a shift cipher as well. If the Shift-cipher encryption ...
10 views

### How to calculate $v_k(s)$ in Quadratic Arithmetic Program?

In the paper Pinocchio: Nearly Practical Verifiable Computation, there are some polynomials $v_k(x)$, $w_k(x)$ and $y_k(x)$ representing the structure of there circuit. However, as in the "concrete ...
28 views

### David Chaum's anonymous credential

I am a newbie in cryptography (I know the basic RSA, AES stuffs) and am interested in anonymous authentication systems. Looks like David Chaum is the godly figure in the field. I see lots of people ...
8 views

### What's the perfect chain length : number of chains ratio for rainbow tables?

I'm building a SHA-1 rainbow table to crack basic passwords (i.e. up to 10 character, 0-9,a-z). But I can't seem to calculate that golden ratio that would give me the most coverage. Also is there ...
42 views

### Degree of M and Max Sequence Length for LFSR

For the LFSR mod 2, determine the degree of m and maximum sequence length s_(i+3)≡ s_i+s_(i-2)+s_(i-4) mod 2 determine the degree of m and the maximum ...
39 views

### Miller Rabin - Error probability of .5 a possibility?

I'm testing the property of Miller Rabin that the error probability is at most 1/4 when only a single base a is chosen and we iterate only one time. We are testing odd integers 90,000 to 100,000. ...
51 views

### argon2 versus bcrypt/PBKDF2 password hashing security gain

I wonder if it can be approximated how much of a security margin the new argon2 hash, winner of the password hashing competition, can give over bcrypt or PBKDF2, for an attacker using large GPU ...
21 views

18 views

### Does CP-ABE have any disincentive to share secret keys

I want to use a CP-ABE scheme to encrypt data to be accessed by multiple unknown (at time of encryption) users. Reading the papers related to CP-ABE, there does not appear to be any disincentive for ...
42 views

### Multiple levels of encryption

Is it feasible to have data encrypted at different levels? I'd like to encrypt an xml database (such as used in www.keepass.info) whereby two keys can exist: Key #1 decrypts the entire database ...
73 views

### Why can you reverse a modulo function when knowing its primes

We are dealing with cryptography in school right now and superficially went over the Rabin cryptosystem with the (apparently usual) example of p=7 and q=11 etc (we didn't do RSA). I understand that ...
64 views

### Exactly how slow is asymmetric encryption?

I'm currently doing a project on RSA, and have just come across this website. https://www.namecheap.com/support/knowledgebase/article.aspx/798/67/what-is-an-rsa-key-used-for On here, it says that ...
45 views

### Which is better? Serialize and then encrypt or Encrypt and then Serialize

Let say in a simple Java program, Considering all the facts, like security and performance, Which is the best way to follow. I tried searching for a answer but proper answer is not out there.
28 views

### security definition

I am new in cryptography and I saw this question in a book. I really don't know what this question means and what is the answer of it(it's not my homework etc. but I'd love to know the answer of ...
78 views

### secure PRF or not

I am new in Cryptography and I saw this question in a note I solved it but I'm not sure about my answers. Let $F : \{0, 1\}^n × \{0, 1\}^n→ \{0, 1\}^n$ be a secure PRF (i.e. a PRF where the key ...
166 views

### RSA time function

I am doing a paper on textbook RSA (highschool-level). I am explaining and proving the significance of the public key exponent in time and security. So far, I have encrypted a constant message with a ...
20 views

### attack on modified DES

any idea for attack on this modified DES? Each round sub-key is 32 bits long, and the round function simply $XOR$s the round sub-key with the input to the round (i.e. $f(k, R) = k_i ⊕ R)$ . For ...
222 views

### Which gives better deterministic encryption SIV or Plain ECB mode?

Lets say , if we encrypt a plain text message $msg$ with key $key$ in below two ways. Which is the below would give better deterministic encryption and why ? AES-ECB($key$ , $msg$) SIV($key$, NIL , ...
385 views

### Encryption and HMAC key derivation

I'm deriving keys from a user-supplied passphrase for symmetric encryption using AES-256 in CBC mode with a HMAC for authenticity/integrity. My key derivation function currently looks like this: ...
27 views

### Execution time RSA [on hold]

I am doing a paper focusing on the public key exponent in textbook RSA. However, I need to know the time complexity for encryption time. I have heard both $O(\hspace{.02 in}\log_2(x))$ and $O(x^2)$ as ...
17 views

### Reference AES-NI assembler code for AES-128-GCM? [on hold]

I want to implement AES-128-GCM in assembler using Intel AES-NI instructions. I have found reference code in the Intel AES-NI Whitepaper but I don't see code for the GCM mode there (or indeed any use ...
30 views

### Elliptic Curve Blind Signature Implementation

I have seen this prior post: Elliptic Curve based blind signature implementation Currently I'm sizing up how difficult it would be to attain Elliptic Curve Blind signatures for an application I'm ...
14 views

### How to decrypt the PBKDF2 Algorithm [on hold]

can you please brief me about PBKDF2,how to decrypt the PBKDF2 algorithm.
108 views

### Bouncy jdk 1.51 Serpent KAT tests vs Nessie vectors

Having a little trouble getting Nessie vectors working with the Bouncy Castle SerpentEngine. Do the Nessie vectors require a mode or some pre-processing? Nessie Serpent 128, set 1, vector 0 reads: ...
63 views

### Is there a way to do single key-pair asymmetric encryption?

All of the information on asymmetric encryption I can find uses key-exchanging to get a mutual symmetric key. What I am trying to do is encrypt a message with a public key and have it only readable ...
3k views

### Why is the IV passed in the clear when it can be easily encrypted?

The initialization vector (IV) is exclusive or'd against the plain text before encryption for the first block sent in order to prevent an attacker from learning that duplicate message blocks are being ...
37 views

### Breaking a Modified Caesar Cipher

Does anyone know of an efficient way of breaking a modified Caesar cipher (where the key is a set of numbers (the amount of shift) that is repeated throughout the plaintext, e.g. {1,2,3,4,5}) via ...
9 views

### Decipher APDU for OpenPGP smart card applet [migrated]

I'm implementing data deciphering into my Java application using javax.smartcardio APIs. I'm using Yubikey NEO smart card element. I managed to: Select OpenPGP applet ...
51 views

### State of the art techniques for Anonymous Authentication?

What are the state of the art techniques for Anonymous Authentication? What are the most popular ones? The problem domain I am considering is with respect to different users accessing cloud content; ...
75 views

### Probability of guessing random 128-bit AES key [on hold]

Consider the following five events: Correctly guessing a random 128-bit AES key on the first try Winning a lottery with 1 million contestants Winning a lottery with 1 million contestants 5 times in ...