# All Questions

44 views

### Sodium crypto_aead_aes256gcm_encrypt ciphertext length > plaintext length

Using the crypto_aead_aes256gcm functions from Sodium produces a ciphertext of "at most mlen (plaintext length) + crypto_aead_aes256gcm_ABYTES bytes (16 bytes) are put into c (ciphertext), and the ...
111 views

### How to calculate the probability to get two random numbers equal from the same generator

I have deterministic random bit generator (DRBG) to generate a random numbers in which it is 10 byte value and I want to turn this algorithm twice, what is the probability to get the two random equal ...
212 views

### Can the SHA256 hashes of consecutive integers be attacked?

Suppose that the attacker knows the SHA256 values of integers $n, n+1, n+2 ... n+k$. $n$ is sufficiently big, so we do not expect to be able to brute force $n$ just by $\operatorname{SHA256}(n)$ ...
469 views

### How is the message digest related to Signatures and Encryption?

I was studying about 'Data Security' and I found out this one thing confusing. What is an message digest? I got it is the hash of the message. Is the message here referring to the plaintext or ...
73 views

### Why is it so hard to make a good KDF?

Why are we stuck with only 2-3 KDF functions since KDFs don't imply mathematically conceiving a cryptographic primitive like the inner workings of AES or SHA but instead build a system out of existing ...
65 views

### what is DHE_EXPORT cipher suite

I need to know what is exactly DHE_EXPORT cipher suite and why it is still supported by some servers. Is there any implementation or details about this weak crypto?
56 views

### How would multiple uses of a vigenère cipher be decrypted on paper (classic)?

As far as I can tell (from reading the Wikipedia article about it) decrypting a message encrypted with the vigenère cipher is possible on paper. But what would happen if the message is encrypted ...
124 views

### Is regular CTR mode vulnerable to any attacks?

Regular plain CTR mode, is it vulnerable to any attack? I plan to write a program to encrypt a drive with ctr mode. Would this be wise? Would AES be better? When I look at this diagram, it looks ...
122 views

### Algebraic structures in RSA

Why do we need a field for RSA and what are the two operations in this field? Why can't we have a ring or group for example? Because in a group you also have inverse elements.
64 views

### Decrypting a file encrypted with AESCRYPT using key instead of password

i have encrypted a file using aescrypt and took memory image while the file was being encrypted and hence have the key that was used for encryption in the image but not the password, can i decrypt the ...
49 views

### What's the best way to pad a message?

Currently my padding is adding a string of random characters $l(N)/3 - (l(M) + 1)$ Long and just adding it to the messages, is this sufficient? $l(x)$ = length of a variable
55 views

### Finding d given everything else in RSA [duplicate]

I've got everything else (e, p, q, phi(n), n), but cannot see a way to figure out what d should be. P and q are both 300 digits, so phi(n) and n are about 600 digits, but e is only 5 digits. I do ...
122 views

### Signing MD5 hashes with RSA? [duplicate]

Lets say I need to update a project and allow anyone to distribute the updates, however I need it to be secure, so I hash the data and sign the hash, this project uses MD5. How likely would it be ...
52 views

### I am trying to understand how AES works

I am trying to understand how AES encryption operates. I am trying to run through the steps on paper to understand. So far, I am creating a simple example. I have the plain text "MESSAGE TESTTEXT" ...
19 views

### security of Even-Mansour scheme with keyed shuffle

I was researching the Even-Mansour scheme and had a question that wasn't addressed in the paper that I saw, and google was minimally helpful. What if a permutation that uses secret data like the ...
328 views

### How secure is a client-side javascript encrypter?

A friend of mine needed help with her website and asked how to send me her login information securely. I've never known how to do this, so I figured now was the time to learn. After some googling, I ...
34 views

### Using quadratic residue to learn the sign of a field element

Given $x' \in \{-x, x\} \bmod q$ (where $q$ could be any prime of my choice), $s$ is a random element in the field, $y = x'\cdot s$ and $y' = \pm\sqrt{(x\cdot s)^2}\bmod q$ (i.e., both solutions to ...
57 views

### Padding password before SHA-512 hashing to avoid info leak via timing

I've noticed that SHA-512 password hashing leaks some information about the password length. There's a weak correlation between password length and time to hash. It's roughly linear, but in steps of ...
50 views

### How to deal with collisions in Bitcoin addresses?

When creating a Bitcoin account, you need to issue a couple of private/public ECDSA-keys. Then, you derive your account address by taking a 160-bit hash (through sha-256 and ripemd) of the public key ...
84 views

### Exploiting XOR one-time-pads with alphabet size that isn't a power of 2

I realized that if the key is chosen randomly from a range that isn't a power of $2$, the one-time-pad leaks information about the plaintext. For example, if the alphabet was the first 20 naturals, ...
52 views

### Proper forward secrecy [closed]

Currently I have a protocol using a simple RSA to AES handshake. I have been reading more and more and would like to implement proper forward secrecy, but at the same time I'd like to improve the ...
36 views

### homomorpic encryption [closed]

I am doing project k-nearest neighbor classification over semantically secure encrypted relational data I have doubt for in smin algorithm in 1)Li ← Wi ∗ Φir′; ri′ ∈R ZN this line it the out put is ...
84 views

### Is it acceptable to write the nonce to the encrypted file during AES-256 GCM? [duplicate]

I've used AES-128 in CTR mode in the past and using the same key but different IVs for each file, I wrote the IV to the first 16 bytes. Is it safe to do so with the nonces used in AES-256 GCM? I'm ...
60 views

### Is WPA2(PKS) AES vulnerable to 4 way hand shake and brute force attack?

I can easily crack a WPA TKIP using a dictionary/brute force method, provided that I collect the four way handshake. Is the same method possible on WPA2 AES? I cannot find any articles about '4 way ...
286 views

### Finding Private key in RSA with public key, cipher text and plain text

Is there a known 'non-brute force' method of determining a private key in an RSA system when all other parameters are know? I found the values of a ciphertext ($C$), its corresponding plaintext ($P$) ...
33 views

### Breaking linear blockcipher - expanding recursive formula

I am trying to break a block cipher that can be defined as follows: We have 12 rounds and at each round we perform the following operation. We split 64 bit data into 2 parts each 32-bits, $\ x_r$ ...
62 views

### Selective and existential unforgability of signature schemes

I understand that one can define EUF-CMA of a signature scheme is terms of a game where the adversary is allowed to query signatures on messages of his choosing, and at the end of the game he must ...
151 views

### What are the minimum constraints on RSA parameters and why?

The RSA cryptosystem only works if certain constraints are applied to its input parameters. Some of those constraints are made to make it "hard" to determine the private key whereas other constraints ...
29 views

### Publishing only items your subscriber previously subscribed to, without you knowing which those items are

Let's say you were given a dump from a security breach. You want to share the email addresses affected by the breach with a separate company who pays you for this service so that they can protect ...
376 views

### Can double-encrypting be easier to break then either algorithm on its own?

As was pointed out in Martin Bonner's comment I cannot prove this, but it seems intuitively impossible. An encryption function is supposed to obscure the plaintext to the point where no information ...
69 views

### Unicity-distance of Playfair

Given the classical scheme Playfair, say, for 5*5 matrices, I am interested to determine its unicity-distance. How should one proceed to properly do that? I should appreciate it, if I could obtain a ...
26 views

### MISTY1 encryption/ extension tricks

I'm trying to understand MISTY1 encryption algorithm but i faced some problems in key scheduling part : Key scheduling part consists of the following operations. for i = 0, ..., 7 do EK[i] = ...
27 views

### Uniqueness of checksums using DES-MAC encryption?

I'm in an Intro to Computer Security class, and one concept I'm having trouble understanding is how two different files could produce the same checksum. How would you produce the same checksum given ...
36 views

### Simple application of verifiable random function?

I have been reading a little bit about verifiable random functions (e.g.). In the literature, these are described as "pseudo-random functions that provide a non-interactively verifiable proof for the ...
20 views

### Which protocols / file formats use CBC with a random IV and without a MAC?

Disclaimer: I am a noob so this may well be a stupid question or one that's been asked before. I didn't see it come up after searching, though, so I'm going to assume it hasn't been asked here. The ...
62 views

### PyCrypto and AES: can i use a longer key than the block size (16byte)?

I see that in many scripts are used keys of 16 characters for a block of 16 byte, but can I use key of 40 (for example)? And then why in some scripts with aes module the block size is set to 32 byte ...
61 views

### Testing implementation of cryptography algorithms: Brainstorm

I wonder what kind of techniques can be used to validate implementation of cryptography algorithms? The obvious one is to run specific algorithms against publically known test vectors (i.e. from ...
104 views

### Anonymity problem after voting with blind signatures

In a distributed voting system (all the messages are public, but signed and maybe encrypted/blinded), having: $d$, $e$, $N$ — registrar key params $m$ — msg $r$ — random blinding factor $m'$ —...
44 views

### Three-Pass Protocol number theory

I've got a homework problem that I'm having a hard time understanding. It's for the Three-Pass Protocol, and we are given p, the three messages, and are told that the original plain text is one of two ...
83 views

### DGHV Bootstrap - How can I recrypt my cipherbit [closed]

I'm implementing this homomorphic crypto-system : http://eprint.iacr.org/2011/440 I'm using SAGE math. I don't get how the bootstrap is done in this scheme, in the appendix A, they say ...
75 views

### Which encryption is recommended for own messenger [closed]

I wrote my own messaging-app and now I would like to encrypt the data transfer between my client (app) and my server. What kind of encryption is easy to implement and can be recommended? I am very ...
16 views

### Implications of pattern in finial digit of prime numbers [duplicate]

http://qz.com/639452/mathematicians-are-geeking-out-about-a-bizarre-discovery-in-prime-numbers/ What are the implications of this (very) new research on crytopgraphy? I would have thought this would ...
117 views

### Which attacks are possible against raw/textbook NTRU encryption?

In the same fashion that these questions about attacks to textbook RSA and ECC, I was wondering what are the immediate drawbacks of applying NTRU Encryption directly, without any padding scheme, such ...
934 views

### AES key reuse and guessing the key

Bit of a noob question and a fair bit of Googling didn't help. I understand that the current encryption standard is AES256. A few questions Is the point of this (and other encryption techniques) to ...
33 views

### Playfair Cipher Confusion with one column encryption

Recently I decided to learn "Playfair Cipher", and I have hit a road block. what do i substitute the letters for if they are on the same column? Here is an example: ...
249 views

### Is it better to encrypt before compression or vice versa?

Is it better to encrypt a plain text file before compression, or vice versa?
102 views

### Why does AES ciphertext entropy always close to 8?

I have three binary files: 31744 byte length (1), 5712980 byte length (2) and 10806008 byte length (3). The alphabet is all 256 symbols from 00 to ff. I compute the shannon entropy, replacing ...
77 views

### Best differential characteristic for this PRF

Consider the following construction of a PRF $F: \{0,1\}^{128} \times \{0,1\}^{64} \to \{0,1\}^{64}$ on 64-bit messages and 128-bit keys. Define $f:\{0,1\}^3 \to \{0,1\}$ by f(c,x,y) = \begin{...