1
vote
1answer
29 views

Are digital signatures using preprocessed paper pads possible?

My idea was, given that a computer could produce some sort of lookup tables on paper, could then a human use those lookup tables to create a system for digital signatures? This was really an idea for ...
0
votes
0answers
34 views

What are some hashes that do not exhibit the avalanche effect?

I do not know much about cryptography. But, I'm in a situation where I need a hashing method that does not exhibit the avalanche effect. I tried Googling but couldn't find anything.
1
vote
1answer
29 views

Could this alternative hash based MAC construction be as, or even more secure than an HMAC?

Begin hashing (Key||Message) Encrypt the hash state (or some part of it, such as the first 128 or 256 bits), with the key. Add the encrypted hash state to the ...
2
votes
1answer
46 views

Inversion Free Direct Conversion between Twisted Edwards (X,Y,Z) and Montgomery (X,Z)

The Wikipedia page for Montgomery curves shows how to convert points on a twisted Edwards curve to and from points on an equivalent Montgomery curve. However, their description and the original ...
3
votes
3answers
557 views

What is the difference between online and offline brute force attacks?

I read some papers saying a certain scheme is secure for offline brute force attacks, but vulnerable to online brute force attacks. I wonder the difference between the online and offline brute force ...
1
vote
1answer
30 views

Does failure of indistinguishability of encryptions imply lack of CPA-security?

Suppose we have an encryption scheme that fails the indistinguishability of encryptions test. That is, given messages $m_0, m_1$ and a ciphertext $c_b = Enc_k(m_b)$, where $b \in \{0, 1\}$, the ...
0
votes
0answers
32 views

Encryption on mobile devices? [closed]

I have studied the basics of cryptography, so it would be okay to say that I am familiar with the concepts of Cryptography (Theoretical). I have surfed the net for days to implement my theoretical ...
2
votes
1answer
38 views

On composition of encryption schemes

If we composed (as in function composition) multiple CPA-secure encryption schemes would the result also be CPA-secure?
0
votes
1answer
48 views

Is there an asymmetric One-Time-Pad? [duplicate]

Is there something like a perfect asymmetric crypto-algo? Is there proof that there must be one or not. From a logical point of view it seems to be possible to design such algorithm if your keysize is ...
0
votes
0answers
24 views

Finding patterns in a gambling game [closed]

I'm working on a program that I hope it will help me to get better chances on a gambling game. I have a very large database of numbers how occur in this game and my program pass through those numbers ...
1
vote
1answer
48 views

Chosen-plaintext attack

Let F be a block cipher with 128-bit block length. Consider the following encryption scheme for 256-bit messages: to encrypt message $M=m_1∥m_2$ using key $k$ (where $|m_1|=|m_2|=128$), choose random ...
0
votes
1answer
34 views

Which of the following hash functions is collision resistant?

Let $H: M \to T\ $ be a collision resistant hash function. Which of the following is collision resistant: $ 1.H'(m) = H(m \big\| m)$ $2.H'(m) = H(m) \big\| H(0)$ $3.H'(m) = H(m) \oplus H(m)$ ...
0
votes
0answers
25 views

Signing a pdf document [closed]

I want to read a pdf document through an android application developed my me .Then i want to sign it through an certficate recorded in the smartphone.There is someone who know how to do it and thanks ...
0
votes
0answers
76 views

Which of these is a secure MAC?

Let (S,V) be a secure MAC defined over $(K,M,T)$ where $M = \{0,1\}^n$ and $T =\{0,1\}^{128}$. Which of the following is a secure MAC: $S'(k,m) = S(k,m)[0,\ldots,126]\quad and \quad V'(k,m,t) = ...
1
vote
1answer
39 views

How to securely store data? / How to securely encrypt a file? [on hold]

How do I safely encrypt a file? or formulated differentely: How do I safely store the data of my application in a file? Note: Using established tools isn't an option for this. The tasks need to be ...
0
votes
0answers
23 views

Why does self-signed HTTPS show an error page, but self-“signed”/made HTTP does not? [closed]

Is there any reason, why browser show a huge warning message when a website uses self-signed HTTPS, but do not show a warning when the website is using HTTP? As far as I know using HTTPS - no matter ...
5
votes
2answers
128 views

Is the HMAC construction really neccessary for a fixed length message?

The HMAC Construction is defined as: Hash( (Key XOR opad) || Hash((Key XOR ipad) || Message) ) This was designed because a simpler construction such as: ...
0
votes
1answer
48 views

Paper from NSA sponsored conference? [closed]

I'm interested to read paper presented on this conference: https://www.nsa.gov/about/_files/cryptologic_heritage/2011_SYMP_Package_25_July.pdf Dr. Jerca Vodusek Staric, University of Maribor ...
0
votes
0answers
37 views

Enigma algorithm Question about the Ringstellung

This might be a stupid question but I need to implement the Enigma algorithm and I don't fully understand how it works. I've googled the subject and I am confused about what the Ringstellung is and ...
1
vote
2answers
115 views

Is One Time Pad considered Chosen-Plaintext Attack Secure?

If we're considering Chosen-Plaintext Attack setting, then the adversary has access to the Encryption Oracle right, and we know that OTP is only considered secure if we use the key only once. How ...
1
vote
0answers
23 views

How do I verify a reset token if the token is hashed in DB?

I've been searching around the web for best practice how-to on secure password reset system (email with reset url), and the idea to hash the token in the database, which I did not implement at first, ...
0
votes
1answer
30 views

CCA secure or not?

Let $F : \{0,1\}^n \times \{0,1\}^n \rightarrow \{0,1\}^n $ be a PRF. And let the encryption function be $Enc{_k}(m) = r || (F{_k}(m) \bigoplus r \bigoplus 0^n)$ , where r's value is random. Is this ...
0
votes
1answer
57 views

Computational indistinguishability with Example

Based on computational indistinguishability definition no PPT algorithm can distinguish $X$ from $Y$, where $X=\{X_n\}_{n \in N}$ and $Y=\{Y_n\}_{n \in N}$ are ensembles of probability ...
0
votes
0answers
22 views

Encrypting a file so that it can be decrypted everywhere out of the box [closed]

I would like to encrypt a file and be confident that: I can open it on any platform with just a password. I can do this even on computers where I have restricted access, such as on computers in a ...
2
votes
0answers
23 views

Proposed unidirectional authentication scheme

I've been looking around for a way to authenticate a client to the server and deliver a message, but in a unidirectional fashion - that is, the client sends messages to the server, but the server ...
0
votes
1answer
60 views

How do we know one-way functions can be iterated?

Suppose we have some one-way function $h$. Without further specification of $h$, how can we be sure that we can define another function $g(n) = h(h(n))$? That is, how do we know the range of $h$ is a ...
0
votes
2answers
60 views

Modifying a [CRC32] checksum protected file [closed]

I dont want to ask for help without showing how far I came by myself, so this is what I have so far: The file of interest is an encrypted/obfuscated .bin script, which cotains information on certain ...
0
votes
1answer
22 views

Encryting data with password for local storage using libsodium

I want to encrypt data that is stored on the hard disk using a user-entered password. For this I look into the sodium docs and all I can find for symmetric encryption is authenticated encryption. ...
1
vote
2answers
68 views

Negilible Function $\frac{1}{n!}$

Is $\frac{1}{n!}$ a negligible function where $n$ is a security parameter? Application: I have a vector of n>100 elements. I permute it and give it to an adversary. The adversary can break it if it ...
2
votes
1answer
38 views

Does the plaintext have to be at least as long as the key in Polyalphabetic substituion cipher

In polyalphabetic substitution cipher, if we have a key $k$ (a string of letters) of length $n$ does the plaintext $m$ (also a string of letters) have to satisfy $|m| \geq n$? Also, side question, ...
2
votes
1answer
58 views

Authenticate a short message with redundant encryption instead of using a MAC?

I have a short message that’s exactly 128 bits of length. The message serves as a time-limited authorization token for a database. It contains a permission profile ID (64 bits) and an issue timestamp ...
-2
votes
0answers
31 views

How to implement H1(x) [closed]

I want to implement H1(M,S1) in python for my project.Where , H1 :{0,1}* × Zp->Zq. M is the message and s1 is the key.
0
votes
1answer
59 views

AES process candidates implementations and usages

There were fifteen candidates in the AES selection and I suppose that Rijndael wasn't the single good algorithm. I know that Camellia is an evolution of E2 candidate and can be used as symetric ...
-1
votes
0answers
22 views

How can one improve Rijndael's with more efficient SBoxes?

Knowing that the Rijndael's SBox is a pre-calculation from a composition of two operations (an inversion in a polynomial field, and an affine transformation that can be saw as a product and an ...
0
votes
1answer
17 views

Ephemeral Diffie-Hellman in a symmetric crypto context

I'd like forward secrecy in a case where the two sides have a shared long-term symmetric key. I intend to use AES in GCM. It looks like ephemeral Diffie-Hellman is the best way to generate the session ...
0
votes
0answers
12 views

AES GCM Mode Client Side [closed]

I am implementing browser side cryptography in my project. I want to implement the AES-GCM in both client side and server side. I am using nodejs for that. I have researched on the net but I found ...
2
votes
1answer
60 views

How do we guarantee plaintext is coprime in RSA?

The specifications for RSA state: $P^{\phi(N)} \equiv 1 ~mod~N$ if and only if $P$ and $N$ are coprime. Here $P$ is the plaintext and $N$ is the product of two suitable primes $x_1, x_2$. My question ...
0
votes
0answers
46 views

Calculating XOR Key Sizes

I've been playing around with the Matasano crypto challenges (cryptopals.com). I had a couple false-starts on the challenge that has you creating a program to calculate the key size of a XOR encrypted ...
1
vote
2answers
146 views

Elliptic curve brute forcing

I have elliptic curve of equation $y^2 \equiv x^3 -x $. And the coordinate of points $Q$ and $P$. I want to solve $Q=[k]P$ (where $k$ is the unknown) by testing all possible $k$. Is this the right ...
0
votes
2answers
32 views

what is recommended x length in Diffie Hellman algorithm

According to rfc documents http://tools.ietf.org/html/rfc2412#appendix-E.2 & http://tools.ietf.org/html/rfc3526#section-3, it has defined the prime and the ...
1
vote
0answers
37 views

Commitment scheme to share money

I have such problem: party $X$ has an amount of money $M$, which it needs to share with $n$ other parties. Every week the amount of money is different. Let say not, that I am a party A, which is one ...
1
vote
1answer
91 views

Why doesn't this defeat RSA?

Apologies for the obviously ridiculous question but I need to know where I'm going wrong here. For RSA, we compute $n=pq$ for primes $p$ and $q$. We then choose an $e$ such that $gcd(e, ...
-2
votes
1answer
75 views

SAT as a basis for a PKCS - Effective? [closed]

I recently read this paper on a public key cryptosystem based on the SAT-problem.(SAT=boolean satisfiability problem, NP-complete) The speed of this system looks quite promising as extreme ...
-1
votes
0answers
32 views

We are trying to decode a mysterious website, need help from experts [closed]

Here is the link of our investigation - http://www.reddit.com/r/gateway71 We are currently stuck on gif with blinking boxes and voice that appears to say the same what is happening on the gif. Here ...
1
vote
0answers
19 views

System of linear congruence, not relatively prime [migrated]

Consider we have the following set of congruences $$x\equiv b_i \pmod {m_i}$$ for all $1\leq i\leq d$. $m_i$'s doesn't have to be relatively prime, so the Chinese remainder theorem doesn't work here. ...
-2
votes
0answers
16 views

How to get the (x,y) from the EC point in the pubkey of an ECDSA certificate?

I have this certificate, and I have the bitstring of the pubkey that should represent Q = (x,y) = [d]P. How can I get the x part? (The curve is the NIST B-163)
0
votes
1answer
74 views

Why cant Public Key Encryption be perfectly secure? [duplicate]

I would be very grateful for any help. I cant figure out why (probabilistic) public key encryption schemes can never provide perfect secrecy? Any Ideas? Excerpt: In contrast to the private-key ...
0
votes
0answers
21 views

How to convert PGP clearsign into the ascii armored OpenPGP message? [closed]

What I do have is the output of echo 'Test' | gpg --clearsign (take a look at below for instance): -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Test -----BEGIN ...
-1
votes
2answers
92 views

Meet-in-the-Middle attack on 3DES [duplicate]

How can I apply the Meet-in-the-Middle attack to the 3DES algorithm, and why does the literature say that 3DES is more secure than DES?
1
vote
0answers
28 views

Recovering key length from transposition block cipher ciphertext

First of all I would like to say hello to all StackExchange users. So far I've been stalking the forum for some time, now it's time to leave the shadows. In my master thesis I'm writing about ...

15 30 50 per page