1
vote
0answers
78 views

In what countries am I now allowed to talk about technical details of cryptography? [closed]

I hope this is the correct place to post this, otherwise I'm sorry. The OpenSSL Legality section states: OR EVEN JUST COMMUNICATING TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN ...
1
vote
3answers
293 views

Decrypt AES-encrypted data with another key

Here is a plain question, all filled with pseudo-real data :) We have a string: "hello" and two keys for AES: GoodKey and BadKey. We encrypt our string with GoodKey, and receive something like ...
0
votes
1answer
94 views

What makes this mixer function resistant to differential cryptanalysis?

I recently learned how differential cryptanalysis works, and decided to have a play around with testing various designs for resistance against attack. My testing algorithm is essentially to loop ...
1
vote
1answer
157 views

How to encypt/decrypt messages after ECDH key agreement

I am using Diffie-Helman key exchange to generate the shared secret. But how will can a message be encrypted using this shared key?
0
votes
1answer
65 views

New to cryptology, studying key exchange

I'm just getting an overview of some of the concepts in key exchanging at the moment, and I'm a bit disoriented on a few topics, namely key stretching, key derivation functions and perfect forward ...
0
votes
1answer
85 views

uniform vs. non-uniform PPT

I'm trying to understand PPT and in particular what the differences are in uniform and non-uniform PPT's. First, this is how I see it: A Probabilistic Polynomial-Time algorithm A is an algorithm that ...
1
vote
1answer
122 views

Probability of SHA256 Collisions for Certain Amount of Hashed Values

I wonder if you can help me figure out that question: Is there a known probability function f: N -> [0,1], that computes the probability of a sha256 collision for a certain amount of values to be ...
1
vote
1answer
53 views

Average/approximate difference in value between valid consecutive $x$ coordinates in ECC?

From my basic understanding not all values of $x$ coordinates can satisfy a given elliptic curve equation, i.e. some $x$ coordinate values are not valid points on the curve because $x^3+ax+b$ is not a ...
3
votes
0answers
415 views

What are the vulnerabilities of this homemade encryption algorithm? [closed]

I decided to program a relatively trivial encryption algorithm in my downtime. This algorithm takes a seed from a user (supports floating point seeds), and then adds 1 to the seed for every iteration ...
0
votes
0answers
41 views

Vigenère + columnar transposition

I'm trying to decode a text which is encoded by Vigenère followed by a columnar transposition. The method I want to use is trying random columnar transpositions and then rating how much the text that ...
0
votes
0answers
43 views

Recover keys using statistical saturation attack

I am having trouble here performing this attack on a block cipher. This is my block cipher, it is a toy with really bad diffusion just for the sake of performing a successful attack ...
2
votes
1answer
185 views

Is it safe to encrypt random data using ECB mode?

If I have 48 random bytes, is it safe to encrypt them using ECB mode? Or is there still a good reason to use another mode like CTR, CBC, etc.? Context is this: I am creating something like a TLS ...
1
vote
2answers
128 views

Is computing roots moduli a composite $N$ a hard problem without knowing the factorization of $N$?

Suppose that we are given $\mathbb{Z}_{N}$ and an element $x^u \in \mathbb{Z}_{N}$ with $u \in (0,l]$ where $l$ is the bit-size of $N$. Is it difficult to recover $x$ by knowing $u$ without knowing ...
0
votes
0answers
104 views

What can cause similar MD5 hashes

I have a set of MD5 hashes with huge similarities in the second half of the hash, (made up) examples: ...
1
vote
1answer
160 views

Is only one shared secret generated by ECDH per key pair?

I'm confused about ECDH. Using their public keys and private keys, two entities can arrive on a shared secret. But from the equations I've seen, it looks like ONLY the numbers present in their key ...
0
votes
0answers
73 views

Is there any pattern in points on EC?

I read some where in crypto.stackexchange answer (related to EC-SRP protocol) that there is pattern in points on elliptic curves, i.e. if given some points containing mix of correct and wrong points ...
0
votes
1answer
147 views

PKCS#7 signed data structure in signed PDF document

Is it mandatory to include PKCS#7 data (OID 1.2.840.113549.1.7.1) octet string into the sequence of PKCS#7 signed data? I mean if you want to sign PDF, you are basically adding PKCS#7 container ...
2
votes
0answers
39 views

During electronic voting, how does one hide the choice from Voting device?

Assume the following: I want to cast a vote during an election through an electronic voting system. For our system we make the assumption that the device one uses to cast the vote is potentially ...
-1
votes
1answer
102 views

Openssl library problem

I'm using openssl library and I've a problem with RSA_private_encrypt() and RSA_public_decrypt(). I'm using a key size of 256 bit with no padding of the input message. I've noted that when my input ...
2
votes
1answer
76 views

Is there an existing authorative definition of the cryptographic term 'pepper'

I can attempt to define the term 'pepper' as: In cryptography, a pepper is a something that is added to another value (for example a password) prior to a the value being hashed using a ...
2
votes
1answer
86 views

Device intercommunication with commands

I want to create a smart house project, and in that I bought some simple RF modules. Those modules don't support crypto out of the box but I want to connect them to a device that I would program to ...
1
vote
0answers
38 views

RSA, proof of correct work, if p is not a prime number [duplicate]

Is there any proof of correct work of RSA algorithm, if p is not a prime number? For example: n = p*q, p = p1*p2, where p1 and p2 are primes. Edit: I found that it's called Multiprime RSA, but i ...
3
votes
1answer
141 views

Can Poly1305-AES be used with AES-256?

I'm reading through Bernstein's The Poly1305-AES message-authentication code. The MAC is predicated on 16-byte block ciphers like AES and produces 16-byte authentication tags. However, Bernstein does ...
0
votes
1answer
315 views

Cryptography system by combining a block cipher and a stream cipher

I have to come up with a design for a cryptography system by combining a block cipher and a stream cipher. I can't seem to come up with anything on my own. Can someone point me in the right direction ...
1
vote
2answers
136 views

Prove that if we redefine the key space, we can assume Gen chooses a key uniformly

I am working on problem 2.1 in Introduction to Modern Cryptography 2nd edition by Katz and Lindell. 2.1) Prove that by redefining the key space, we may assume that the key generation algorithm ...
2
votes
1answer
105 views

Stacked LFSR - why not used?

New to cryptographic, weak in math. I have designed a PRG which consist of 33 LFSR's, each 32 bits wide. I use one of the LFSR's as "selector", using the 5 LSB from this register to select one of ...
0
votes
0answers
16 views

Keystore and configuration file

It appears that Java Keystore is often used by web server using a configuration file, with the password opening the JKS written in it and also the password protecting the specific entry. How could ...
0
votes
2answers
145 views

Assemble RSA keys from components [closed]

I'm studying openpgp cryptography and struggling to understand some things. I can't use pgp tool for generating keys and ecryption, but have to write a simple app to generate keys, encrypt and decrypt ...
2
votes
1answer
104 views

Is this a valid scheme to authenticate through a 'human-readable' certificate?

Let's say Alice wants to talk securely to Bob over the internet, and Eve is not only eavesdropping, but has managed to get into a MITM position. In this scheme Alice and Bob exchange $n$ (example $n ...
1
vote
0answers
36 views

Zero knowledge of two factor

Here I overconfident in myself state that I can show, that n has two factors. This is not completely true, can possibly show $n$ is composite - prover generates RSA key with modulo $n$, and gives $e$ ...
2
votes
1answer
1k views

Practical brute-force attack on 128 bit encryption

In brute-force attack calculations cryptographers say we should assume an attacker will find the key after $2^{(n/2)}$ tries. If n=128, then n/2=64. We know that this is practical (A 64 bit key is ...
1
vote
1answer
531 views

Key sizes supported by 3DES

I read about 3DES encryption but I don't understand exactly what the specific meaning of key size is. For example I found that 3DES supports 64, 128, 192, and 256 bits key size. What are all the ...
1
vote
1answer
99 views

Regarding NTRU homomorphic properties

NTRU has some homomorphic properties modulo q, supporting both addition and multiplication. Due to its nature, it cannot support many of them. My main focus currently is in the addition, so the ...
1
vote
1answer
133 views

Collision attacks on digital signatures

After reading this document about MD5 collision attacks, I still don't understand how collisions can make digital signatures insecure. In the paper, the researchers created two files with the same ...
6
votes
1answer
276 views

The effect of truncated hash on entropy

Suppose i have a 128 bits random binary string (128 bits of entropy), then i hash it using SHA-256, then i take the first 128 bits of the output hash. Does the taken bit string still have (almost) 128 ...
0
votes
0answers
40 views

RSA: If I know n, e, p, and q, how do I calculate d using the extended euclidean algorithm? [duplicate]

After doing a good amount of research, it's become fairly obvious that I ought to be using the extended Euclidean algorithm to calculate d from the data that I already have. However, this isn't an ...
0
votes
0answers
58 views

common ways / methods to try to break a SP network

I have a very little cryptography background (but a relatively solid maths background) so my below question is very general. Basically I have been given a SP network with an output to reverse. I ...
2
votes
1answer
63 views

Is it secure to transmit a short plaintext with its MAC?

I have a short (32-bit) message that needs to be authenticated. Due to the constraints of my platform, I would like to use Speck32/64 (32-bit block, 64-bit key) with a Matyas-Meyer-Oseas one-way ...
5
votes
1answer
225 views

Can machine learning analyze random number generator?

I'm studying for random number generators(RNG) and I saw about machine learning a few days ago. So I searched analysis of RNG using machine learning. But I couldn't find such fields. Are there such ...
1
vote
1answer
115 views

NTRU Encryption

It's using Euclidian inverse. Can you show it step by step? $$N=7, q=11, a = 3+2X^2 -3X^4 +X^6$$ the inverse of $a \pmod {11}$ is $$A=-2+4X+2X^2 +4X^3 -4X^4 +2X^5 -2X^6$$ How do we compute $A$?
0
votes
1answer
70 views

Blum primes [x=3(mod 4)] zero knowledge proof?

Lets say we have 2 primes, $p \equiv q \equiv 3 \pmod{4}$, and we make $n=p \times q$ public. I can, without revealing factors, show that $n$ has two prime factors. How can i zero knowledge prove ...
0
votes
1answer
94 views

Are modes of operation algorithms practical?

I took a cryptography class back in college, and now that I am working my 1st career one of the things currently on my plate is coming up with an algorithm to encrypt data before it's placed on the ...
0
votes
3answers
181 views

zendo data size restrictions

zendo is a new mobile phone app which encrypts messages using a one-time pad: http://techcrunch.com/2015/03/24/one-time-pads-ride-again/ users have to meet in person and exchange a key via a qr ...
1
vote
3answers
108 views

Does perfect secrecy imply uniform ciphertext distribution?

I suspect the answer is no, but I am not able to either prove it, or provide an example. In Katz and Lindell's book, it is only said that with a perfectly secret encryption scheme, the plain and ...
0
votes
1answer
73 views

RSA weak padding

Suppose to have a function for numbers expressed in 8-bit $\in [0,2^8-1]$ defined as: $$f(x)=x||x||x||x$$ where $|f(x)|$ is exactly 32 bits. e.g., suppose x=2 (00000010) so ...
1
vote
3answers
121 views

Cycles in SHA256

In the recommendations, it seems cycles is used usually as in "CPU Cycles", but, that's not what I mean here. What I mean, is this: Let's say I start with a particular 256 bit value. Call this v. I ...
2
votes
3answers
112 views

Hash function such that fx(hash(s1),hash(s2)) = hash(concat(s1,s2))

First, I'm not a mathematician, so I may express this question awkwardly. Feel free to chuckle. I'm wondering if there exists a hash function h such that for given strings s1 and s2, and string ...
1
vote
1answer
81 views

Authentication using a one-time pad

I am building a small embedded system of two nodes that communicate wirelessly. The microcontrollers I'm using are very limited: they only have 256 bytes of RAM. I would like to be able to ...
0
votes
1answer
52 views

Bit commitment, two blobs with same bit, without revealing it?

Suppose we have bit commitment scheme: $n=p*q$ and $t \in QNR_n$, with Jacobi $(\frac{t}{n})=1$ Commitment(P), random $x\in \mathbb{Z}_n$, $y=x^2t^b$, where $b$ is bit. Ok, suppose we have $y_1$ and ...
2
votes
1answer
48 views

Discrete log accumulator without pairings

Here $g$ is some fixed generator of a discrete log group. I don't want the group to be bilinear for efficiency and BDH-skepticism reasons. Is anyone aware of a discrete log accumulator? What I mean ...

15 30 50 per page