3
votes
1answer
119 views

How to generate own secure elliptic curves?

I know that the algorithm used to generate the Brainpool curves and the NIST curves is published. The algorithm should be this one (RFC5639 Appendix A). From what it looks like it's rather slow to ...
1
vote
0answers
19 views

Why is Chrome saying that “TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)” is an obsolete cipher suite? [migrated]

When I go to this site, Chrome Version 44.0.2403.89 is connecting to the server with TLS_RSA_WITH_AES_128_CBC_SHA (0x2f), and it states that this is an "obsolete cipher suite". For what reason is it ...
2
votes
1answer
41 views

Favor hash size or field size when systems are disparate?

I'm working on an implementation of Krawczyk's Hashed MQV (HMQV). I'm using Crypto++, which is a C++ library. C++ has some features where classes that represent the crypto objects can be combined ...
1
vote
1answer
120 views

Why isn't Rabin-Williams cryptosystem widely used?

I think we all know RSA. And of course we also know DJB (a.k.a. Daniel J. Bernstein). Now some already have noticed that he has an opinion towards cryptographic questions. In his 2008 paper ("RSA ...
3
votes
0answers
24 views

Proving existence of an encryption scheme that has indistinghuishable multiple encryptions in the presence of an eavesdropper, but is not CPA-secure [duplicate]

I got stuck in trying to find a solution to the 3.7 exercise of the Katz-Lindell book. The exercise also assumes the existence of a pseudorandom function. The problem is that a multiple messages ...
9
votes
1answer
4k views

Why is Diffie-Hellman considered in the context of public key cryptography?

In all textbooks I used the Diffie-Hellman key exchange is under "public key cryptography". As far as I can see it is a method to exchange a key to be used with a symmetric cryptographic algorithm, ...
1
vote
1answer
221 views

How does knowing the factorization of N help to obtain the secret?

Assuming $x=a^2 \pmod n$ and knowing $x$, $p$, $q$ how is it possible to obtain $a$?
3
votes
1answer
87 views

How can I generate a good password from a SHA512 hash?

I have to change local administrator passwords on machines. I don't want to store password in a database. I have to generate a password that I can find later to connect to the machine again. So I ...
2
votes
2answers
20 views

Why is Rabin encryption equivalent to factoring?

I don't understand the proof of equivalence I've read everywhere (e.g., in Rabin's paper or on Wikipedia). Here's my objection: let's say you have a Rabin decryption oracle that takes ...
5
votes
1answer
89 views

What is “witness encryption”?

I recently skimmed over tho papers on time-lock encryption: “Time-release Protocol from Bitcoin and Witness Encryption for SAT” by Liu, Garcia, and Ryan “How to Build Time-Lock Encryption” by Jager ...
3
votes
0answers
60 views

Explanation of part of a visual cryptography algorithm

I have been working on a project involving visual cryptography and I am stuck with the following problem. My question is related to this paper, AN IMPROVED VISUAL CRYPTOGRAPHY SCHEME FOR SECRET ...
1
vote
1answer
54 views

What is k in RSA?

I am currently learning about RSA since I didn't understand the public-key-system but now I am… kind of. So I am writing the numbers as follows: $p = prime\ number\\ q = prime\ number\\ N = ...
0
votes
0answers
16 views

Implementation of digit serial rotators for SIMON cipher?

I am working on architecture of SIMON cipher where I have to use either bit serial, parallel or digit serial to implement the algorithm for each round function and also for sub-key generation. So I ...
3
votes
2answers
307 views

What are the implications of a birthday attack on a HMAC?

After collecting approximately $2^{n/2}$ message-tag pairs a collision can be observed. So two different messages (m1 and m2) will have the same tag. This paper states: Then, for any string x, ...
-1
votes
0answers
14 views

parallel shifters [on hold]

suppose there is two registers each of size bit and the inputs to these register are in parallel so can we combine this 2 register so that new combined register will have input 16 bits and all are in ...
2
votes
1answer
65 views

What does “simulator” and “interactive” mean in a cryptographic credential system's definition of security?

Definition 1 on Page 7 of “An Efficient System for Non-transferable Anonymous Credentials with Optional Anonymity Revocation” by Camenisch and Lysyanskaya, uses the term “simulator” in defining the ...
2
votes
1answer
39 views

Using AES for smaller blocks in a Feistel network

I was wondering how decryption would work for FPE in the case of cycled Feistel ciphers. I understand that simply reiterating through the networks with reversed key order will generate the ciphertext ...
1
vote
1answer
38 views

Why should $a,b < N$ for Montgomery Reduction?

In Montgomery reduction, when calculating $a \times b \mod N$, it is required that $a \lt N$ and $b \lt N$. I think $0 \le T \lt N \times R$ is enough for the Montgomery Reduction. Rationale: Let ...
0
votes
1answer
34 views

Execution speed of AES_128 GMAC operation

I have read about the speed performance of AES_128_GCM on specific processors Intel and AMD that support AES New Instruction set. As compared with CMAC and HMAC is it relatively slow for other ...
0
votes
0answers
23 views

How to find the crypt algorithm from a table of crypt vs results? I guess this is MD5 [closed]

Im new on Crypt things, I want to know how to find the "salt" or the algorithm used to convert this strings. I read long time ago about this but for get it even how this process was named. I guess ...
1
vote
0answers
30 views

How can I read the AE figures?

This question is rather simple. I've recently read the paper "Automated Analysis and Synthesis of Authenticated Encryption Schemes". On page 17 of this paper the authors provide three figures of ...
1
vote
1answer
63 views

How is wpa2 authentication structured

I would like to understand the cryptography behind Wpa2. As far as I know, there are 4 messages on the 4-way handshake and three of them are values concatenated with hashes. First, I am trying to ...
-1
votes
0answers
35 views

PS4's Everybody's Gone To The Rapture has some crypto challenges! [on hold]

I thought it was pretty cool that Santa Monica Studios is posting some ciphers for people to decode in promotion for their new game "Everybody's Gone To The Rapture", you can find the three codes so ...
7
votes
1answer
339 views

Why is EdDSA collision-resilient with SHA-512?

In the Bernstein et al. paper about EdDSA, the authors claim EdDSA is resilient against collisions (i.e. it can still be secure even if the hash function used isn't collision-resistant), drawing on a ...
0
votes
0answers
54 views

Publish my Encryption algorithm and test it [on hold]

I created a new encryption algorithm that somehow eliminates patterns in my opinion. Its was my masters degree project I didn't concentrate on mathematical problems, the idea of this algorithm ...
-1
votes
1answer
42 views

i cant understand the meaning and the difference between linearity equation and affine and non linearity?

i cant understand the meaning and the difference between linearity and affine and non linearity equations and what is the meaning of the free term in affine form and how it make the equation non ...
3
votes
1answer
114 views

Is secure communication without public-key crytography feasible?

We all know about public-key cryptosystems, and we know some of these are computationally secure (for the time being, of course). Are there any algorithms out there which allow safe communication ...
0
votes
1answer
45 views

TLS encryption with a self-signed PKI and Python’s asyncio module

I want to enable TLS encryption with a custom / self-signed PKI for a self-contained distributed system built with Python 3’s asyncio. I’ve read Python’s ssl docs as well as several tutorials: ...
1
vote
2answers
85 views

TRNG vs PRNG - Entropy?

How much more entropy gives a Hardware Random Number Generator or True Random Number Generator compared to a Pseudo Random Number Generator? I know it depends on which TRNG is used, but I'm thinking ...
1
vote
1answer
28 views

Certificate for the public key

I am new to Network Security and learning about various security features like Diffie-Helmann and others. I understand that the Public key send by the server to the client needs to certified that it ...
2
votes
0answers
58 views

How can I design a cryptographically secure, key-dependent s-box?

I would like to design a cryptographically secure, key-dependent s-box, but I am not sure how. Mainly, because I am unsure about the difference in design compared to a random s-box. What is the ...
1
vote
2answers
87 views

Does this chat protocol exist?

I want to implement a secure chat via mobile. I´ld like to know if the following protocol for key agreement – which can use any asymmetric encryption – exists. Suppose Alice and Bob are two clients ...
3
votes
1answer
66 views

Logjam-style attack on Factoring?

We're all aware of the Logjam attack, which is known as "FREAK on discrete logarithms". The attack works by doing a large pre-computation step, which needs only to be done once per field and then ...
3
votes
0answers
230 views

Evaluating Algebraic Complexity of a S-box

While studying the design and the desirable properties of an AES S-box , I came to know that Algebraic Complexity is also an important property of an S-box which is usually considered while evaluating ...
0
votes
0answers
19 views

Proving one crypto technique is better than another [closed]

Anyone have a paper on how to go about proving one crypto technique is better than another? If someone devised a new crypt they believe to be better than current RSA, how do they go about proving ...
2
votes
1answer
32 views

Does pseudorandom secret sharing require a central dealer?

I'm trying to figure out whether pseudorandom secret sharing (as described in this paper) requires a central dealer, i.e. one party who doles out keys to the other players and thus who would be able ...
0
votes
0answers
14 views

Encryption and Decoding Messages [closed]

can anyone plz help decipher this message? QVHFH HZRW, 'DSLVEVI WIMPH GSV DZGVS R TREV GSVN DROO MVEVI GSRIHG ZTZRM.' - QLSM 5:85 Thx
1
vote
0answers
26 views

Decrypt ARC4 messages that are using the same keystream [duplicate]

I have 38 16-byte messages and 1 15-byte message encrypted using ARC4. https://www.dlitz.net/software/pycrypto/api/current/Crypto.Cipher.ARC4-module.html The same keystream was used in all messages. ...
2
votes
2answers
91 views

Question about the key in RC4

I am planning to develop a more secure version of the RC4 algorithm. Since I´m not an encryption expert, I´ld like you to help me find answers to the following questions: Does the value of the key ...
0
votes
0answers
8 views

What is the difference between openssl pkeyutl -sign and openssl rsautl -sign [migrated]

What is the difference between openssl pkeyutl -sign -pkeyopt digest:sha256 and openssl rsautl -sign ? Do they do the same ...
-1
votes
0answers
28 views

what is the best Encryption algorithm to encrypt real time voice [closed]

i am developing real time secure voice transmission application and i am not sure what is the best encryption algorithm to encrypt voice
0
votes
0answers
57 views

Analyzing complexity of HMAC-SHA-256?

I'm new to cryptography, please don't mind me if I'm asking anything wrong. How can I analyse the complexity of HMAC-SHA-256 if the size of my key is 128 bits and my message contains 128 bits ...
6
votes
2answers
310 views

Determine LFSR phase quickly?

I know it's possible with work backwards from the output bits of an LFSR to determine its feedback polynomial in a O(n) fashion. I'm also curious if, given an LFSR state and polynomial, is it ...
0
votes
0answers
29 views

How do I decrypt a file I didn't encrypt? [closed]

I backed up a game save from my android device using ADB and backed up the save data, not the app. It is encrypted even though I didn't encrypt. I would like to know how to decrypt it, as I tried ...
0
votes
0answers
12 views

AES GCM 128, c#: very 12 byte tag instead of 16 [closed]

I'm using Security.Cryptography.dll and I'm wondering if there is a way to decrypt and check tag which is shorter(12 bytes)? I have situation where only 12 of 16 bytes of tag are sent in network ...
1
vote
1answer
40 views

Determine if encryption is safe against CPA

The following encryption scheme encrypts each block of length $n$ of the plaintext separately: $c_i = k_1 \oplus F(k_2 \oplus p_i)$ Where $F$ is a strong pseudo-random permutation (i.e. it is easy ...
-2
votes
1answer
41 views

Shuffleless PRNG function with non-repeating values?

I need a simple PRNG function of type: Integer = PRNG(n, maxval) as I would like to count from 0 to maxval, not in a linear manner, but in a pseudorandom manner where I still use every value, but ...
1
vote
0answers
22 views

Chance to find HMAC key/salt when having knowledge of the hashed data?

I'm not sure how to word this... I'm working with a HMAC (I think of it being a "salted hash"). I know the entire string being hashed, I do NOT know the salt. I also know the first 8 characters of the ...
1
vote
0answers
223 views

Montgomery Reduction

I'm taking a hardware cryptography class and working on a problem that focuses on Montgomery Reduction. So by definition: Computing a x b (mod N) Pick R, s.t. R > N, gcd (R,N) = 1 Compute N^-1 ...
1
vote
1answer
69 views

Understanding Meet-in-the-Middle attack on block ciphers

I understand how to implement a Meet-in-the-Middle attack on 2DES/3DES, by computing for one half all possible keys and storing the outcome and then subsequently do the same for the other half but ...

15 30 50 per page