1
vote
1answer
70 views

Known plaintext attack on 3 round SIMON block cipher

I am attempting to write a program to perform a linear approximation attack on a reduced round version of the SIMON block cipher, but I am stuck on how to actually apply the linear approximation to ...
2
votes
0answers
46 views

Under what conditions did a Bletchley bombe stop?

I am trying to understand the conditions necessary for one of the Bletchley Park bombes to stop. Let me give an example. I have been experimenting with Enigma machine and bombe simulators to try to ...
7
votes
0answers
175 views

Is it possible to break enigma code with a todays laptop

I have a 500 characters enigma encoded text. Random rollers were used (not the ones from wikipedia). I know of this flaw. I can guess some words that sould be in the text, but this probably doesn't ...
1
vote
1answer
28 views

DHKE choice of private keys

In some literature it is written that the private key should be chosen random from {2,3, ..., p-1} and in some it says {2,3, ..., p-2} I guess p-1 is a weak private key, but why is that so? The ...
2
votes
1answer
53 views

what are the NTRU keysize and application in industry ?

I'm a student currently working on a research project on the NTRU cryptosystem, I've read some papers about this cryptosystem, and in those papers they are talking about keysize, is it the size of the ...
0
votes
0answers
42 views

Rabin cryptosystem with 1 mod 4

We have p and q which are distinct primes congruent to 1 mod 4. Then we have n = p*q. Do you know any algorith for calculating square roots for the decryption in this case? I'm asking for some ...
0
votes
2answers
44 views

Are there drawbacks to encrypting data locally before being encrypted in cloud backup (multiple encryption)?

I am planning on backing up my hard drive using a cloud backup service but have become skeptical of the industry based on incidents like these: ...
0
votes
1answer
58 views

Is there any patent free EC point compression available? If not, should I GPL/LGPL my code?

I'm currently using the BouncyCastle implementation in uncompressed mode, and considering releasing an optimized version of EC code that uses point compression. It appears the only thing limiting me ...
0
votes
1answer
33 views

Different keys for clients but 1 key on server

Is it possible to have different keys on alot of (embedded) devices and just have 1 key on a server (to witch all these devices connect)? The main point here being when 1 device is compromised this ...
1
vote
2answers
30 views

correct usage of keys and nonce

I've being studying up on AES, GCM, CBC, HMAC and a lot of other primitives and am somewhat ( a little bit, perhaps) familiar with them however I am still a bit weary on the use of the keys and nonce. ...
-4
votes
0answers
29 views

Winmain Error on Cygwin [on hold]

I am running some C code, i have not made this code but from the comments the code seems to work. For the code to work i have saved a header file than compiled the code. I keep getting this error ...
4
votes
1answer
124 views

The difference between MAC algorithms and what to use

I've been looking into message authentication codes and found several ways to create integrity for a message. I know of the following algorithms: HMAC, this can use any cryptograhpic hash function ...
0
votes
1answer
44 views

How is the MAC or HMAC secret shared with the other party for verification?

I've seen people everywhere say to use a MAC or HMAC with block ciphers. I think I understand the basics, but I'm still not sure how the HMAC secret is distributed so the other party can verify that ...
0
votes
0answers
69 views

Security of basic SHA256 MAC in an authenticate-then-encrypt scheme

I know the following construct is insecure if the MAC as defined below is appended to the encrypted message in an Encrypt then Authenticate (EtA) scheme. $k_1$: encryption key $k_2$: authentication ...
1
vote
1answer
40 views

Words in Index of coincidence using vignere

I am trying to interpret the formula for index of coincidence from here I am not understanding fi , How i can calculate fi in this context ? Is this the appearance of single word like (...
0
votes
1answer
48 views

Attribute-based encryption for cloud storage

I'm trying to understand attribute-based encryption schemes. Almost all articles describe that they are designed for cloud storage, but as I understand, almost all computing (encryption & ...
2
votes
1answer
75 views

Plaintext block chaining, bad idea why?

Ahead of the question, little warning. Question is not about what are the better options. Question is why it is bad idea? Ok, suppose we have plaintext $p$, which divided into blocks: ...
3
votes
1answer
87 views

Is it ever unsafe to compress an EC point?

I am working with a library that outputs EC points in uncompressed form. To save space, I'm considering modifying said library to use compressed EC points. Assuming that I keep track of the sign bit ...
0
votes
2answers
42 views

Length of prime number used in Pedersen Commitment

I am writing a program using a Pedersen commitment scheme and all I'm missing is an appropriate length for my prime $p$. I have heard that a length of $2^{80}$ is ok, is that correct?
2
votes
0answers
62 views

Proving that a plaintext is the Paillier decryption of a certain ciphertext

Assume that Alice received 100 ciphertexts encrypted with additive homomorphic encryption, say Paillier, using the same public key that belongs to Bob. Alice added all of them, and wants to know the ...
-3
votes
0answers
73 views

Is there any specific name for Shamir's attack? [on hold]

Is there any specific name for Shamir's attack? Because, I didn't find any attack named "Shamir's Attack" in Wikipedia. Shamir seemed to have published one article which showed that he can attack MH ...
0
votes
1answer
26 views

Using HMAC SHA256 to protect payment files in local trusted network

in a project that I am working on we have been tasked with eliminating PGP while providing sufficient security to protect payment files only within the Company's trusted network. We arrived at HMAC ...
2
votes
1answer
27 views

Is MCrypt's 8-bit OFB mode secure?

I just stumbled across a Stack Overflow post which points out that the libmcrypt library (notably used in PHP) implements a somewhat unusual set of block cipher modes: it calls the usual CFB and OFB ...
2
votes
1answer
57 views

Retrieve value of private key after encryption with the public key

Is there a way to find an RSA private key after it is encrypted with the corresponding public key? Does there exist an algorithm to recover the private key in this special case?
3
votes
1answer
533 views

Why does applying 56-bit DES twice only give 57 bits of security? [duplicate]

Given two 56-bit keys, $k_1$ and $k_2$, why does $E_{k_1}(E_{k_2}(M))$ only give 57 bits of security? So basically I'm unsure why it only gives 57 bits of security; I understand that one key will ...
-2
votes
0answers
74 views

Need urgent help solving a riddle [closed]

We got this riddle during a contest. This code requires 36 characters to be used: a->z AND 0->9. Can you solve it? hacgp6by68astytga5azagndca8jopc Need help solving it.
0
votes
0answers
44 views

What are the links between Cryptography and Algebraic Topology?

I have asked "What are application of Cryptography in Algebraic Topology". But I want to know whether are there any relation between Algebraic Topology and Cryptography. Are there any application of ...
-2
votes
0answers
32 views

Unlock my ZipCrypto deflate [closed]

Can anyone help me I have forgot my password for my file.. ZipCrypto deflate. I need a software to unlock the file. Please anyone assist me on this matter
-2
votes
0answers
37 views

suitable method for encryption and decryption [closed]

I want to encrypt and store important data in mysql so that no one else can access its original form and I want to decrypt those data whenever required. Which encryption scheme is suitable for this ...
0
votes
1answer
24 views

Combining cascaded encryption keys into one key

Is there an encryption algorithm where it's possible to combine multiple encryption keys into one, so that: $E_{AB}(Data) = E_A(E_B(Data))$ KeyAB should be computable from KeyA and KeyB, but it must ...
0
votes
1answer
60 views

Knowing N and a relationship between the 2 prime numbers(p and q) find p and q generated with RSA

Let there be $p$ and $q$, 2 prime numbers for which the following relationship is true: $|p-q| < 2 \cdot N^{1/4}$. The algorithm first generates the prime number $p$, then it generates $q$ close ...
0
votes
0answers
53 views

What are application of Cryptography in Algebraic Topology [closed]

What are application of Cryptography in Algebraic Topology, specially in Category theory?
0
votes
1answer
42 views

What type of encryption is this? [closed]

I need to know what type of encrpytion is this, ed6467d63c907d220447b00bf875e4e017702ff5
0
votes
2answers
52 views

Integrity compromised - HASH modified

As we are all aware that HASHing is user to verify integrity in cryptography. I have a query about hashing. Suppose a man in the middle attacker manipulates the data and creates new HASH (by running ...
0
votes
1answer
112 views

Multiple AES/ECB encryptions of different data with same key all end with same pattern

We have used "AES/ECB/PKCS5Padding" with a 256 bit key. We encrypt different streams of data (blockwise) with the same key. Each encrypted stream ends with same pattern. What is the reason for this?
1
vote
1answer
38 views

Is authentication length always a subset of encryption length?

Do in all the use cases, if I have to encrypt and authenticate, encrypt-then-authenticate or authenticate-then-encrypt, like in IPSEC, SSL or SSH or others, if I were to do these operations to a ...
1
vote
1answer
57 views

Vigenère, auto-correlation vs Kasiski examination

What are the differences between 'Kasiski examination' and 'auto-correlation' ? In Cryptool site, they state that autocorrelation analysis is more efficient and clearer than the Friedman or Kasiski ...
3
votes
2answers
140 views

Key space vs Cardinality of 1024-bit RSA

I have been trying to figure out the encryption key space, and cardinality of 1024-bit RSA. From my understanding, the key generated from 1024-bit will be primes greater than $2^{1023}$ but less than ...
0
votes
1answer
44 views

Are keys generated by the user or block cipher algorithms themselves? [closed]

We know block cipher algorithms. In the block cipher algorithms, Key Scheduling is the one crucial part. I see that in some simulation programs of the AES,DES,TripleDES encryption algorithms. In ...
0
votes
1answer
56 views

Finding Vignere Cipher key [closed]

I am new to cryptography and I am just trying to find key for random text. Can please explain the easy way how we can find the key in small number of steps ? if we have text like Peit Wokm! Mhfa ...
0
votes
0answers
46 views

Why is the call to RSA_generate_key_ex() failing sometimes? [closed]

I'm trying to randomly generate a pair of RSA asymmetric keys, however with my current implementation, the RSA_generate_key_ex() method seems to hang forever. I'm unable to extract an error code ...
0
votes
1answer
48 views

How do I control an access code safely?

Upon registration an user has to specify an access code of five digits. This access code is also used as a password for the encryption and decryption of certain strings. The user types in "12345" ...
3
votes
1answer
53 views

dh parameters someone else generated

Am am auditing some software that includes compiled in DH parameters (2048 bits). I can't be sure who generated the DH parameters or how they were generated. Question: Can DH parameters be weak ...
0
votes
0answers
18 views

Does it make sense to have multiple values of authentication and cipher offsets while encrypting a packet?

Consider a packet with N segments. cofsset(cipher offset - from where one must cipher) lies in arbitrary Segment "A". aoffset (authentication offset - from where one must authenticate) lies in ...
0
votes
1answer
46 views

RSA modulus (N) from public key and calculating N from p, q not equal [closed]

I have a RSA public key in the form of public exponent and modulus as follows: ...
0
votes
0answers
22 views

EC based password authenticated key exchange protocol

I would like to know: What is the currently best (efficiency and security wise) known EC based password authenticated key exchange protocol? (i.e. is there any EC based protocol may be similar to DH ...
1
vote
2answers
76 views

nonce of AES-GCM in SSL

It seems that the nonce of AES-GCM in SSL has 3 parts: salt, 4 bytes, generated in handshake, not changed in whole session nonce_explicit, 8 bytes, chosen by the sender and carried in each SSL ...
0
votes
1answer
30 views

Why perfect secrecy can be ensured when a plain message and a cipher-text based on one-time pad are correlated?

First, some well-known results are as follows. For random variables $X$ and $Y$, we have $$H(X,Y) \leq H(X) + H(Y).$$ The equality is achieved when $X$ and $Y$ are independent. Second, in one-time ...
0
votes
2answers
50 views

Fortuna: why are source ID and data length added together with entropy data into the pools

Section 9.5.6 of Cryptography Engineering states that The concatenation [of source number, length of data, and data itself] is then appended to the pool. Why are we including source number and ...
0
votes
0answers
15 views

Website Certificate with different public key [migrated]

I've installed a ssl certificate from https://www.startssl.com/ in a server running with plesk. The website is the following: https://refood.sal-pimenta.pt/ As you can see the certificate is fine but ...

15 30 50 per page