1
vote
1answer
79 views

Are these hash function compositions collision resistant?

If a hash function $H$ is collision resistant, are the following two hash functions collision resistant or not? ($||$ is concatenation) $H'(m) = H(H(m)) || H(m)$ $H''(m) = H(m) || H(m)$ My first ...
1
vote
1answer
84 views

Is it safer to use timestamp in REST authentication?

I am working on a personal project to build a REST authentication system which authenticate clients via three parameters: ...
2
votes
1answer
71 views

Why is AES-128 considered secure while RSA needs a 1024-bit size to be considered secure [duplicate]

I got asked this question today and I didn't know the answer, AES-128 is considered secure, the key size is 2^128, so you would need in average 2^127 tries to break the key. Why does RSA need at least ...
0
votes
0answers
25 views

Do most TLS 1.2 implementations express curves in a canonical form when performing EC arithmetic?

Sorry if this is a silly question, but does anyone know if the cryptographic libraries which implement TLS 1.2 for Firefox, Chrome, etc. express a given curve in a canonical form (i.e. one of ...
2
votes
1answer
138 views

Questions about a SHA3 cipher stream encryption scheme

I have written an encryption implementation using a hash as a cipherstream for demonstration purposes. I know it is slower than more sensible options such as AES but I am interested in several things, ...
1
vote
3answers
56 views

Possible to generate a one time secret which all nodes on the distributed network can know but cannot pre compute

I have a distributed P2P network. Everyday, I want each node to have a secret which is only valid for that day, while each of the other remaining nodes on the network will be able to calculate the ...
2
votes
1answer
66 views

Extracting key bits from linear cryptanalysis equation for SDES

From the linear cryptanalysis of SDES, we get a linear equation consisting the K[1, 3] of the round key 1 and 2. From this how will I retrieve the key bit? How do we solve the linear equation we get ...
0
votes
1answer
27 views

Vulnerabilities in specifying the hash algorithm used for signature verification on a per-message basis

Let's say that I have a 4096-bit RSA key and when I sign data, I typically use SHA-512. As far as I understand it, the hash algorithm used to sign/verify a message is specified in the message. If a ...
1
vote
0answers
34 views

How are the attributes of a user authenticated in attribute-based encryption?

It seems that the papers I am reading do not talk much about this point. That is how the attributes of a user are authenticated in ABE system. To my understanding, there is an attribute authority (AA)...
1
vote
1answer
36 views

How is the root certificate transmitted to pc?

i understand that the purpose of root certificates and CA's is to ensure that the communication parties are who they say they are. But how is the root certificate acquired? Is it not possible that ...
3
votes
1answer
91 views

Convert ciphertexts of one encryption scheme to another without decryption

I want to convert ciphertexts of one encryption scheme to another without decrypting them under the first scheme and then encrypting with the second scheme. For example convert OPE encryption to ...
3
votes
2answers
111 views

How can we define division operation by using Fully homomorphic encryption

Last fews months, I'm working with homomorphic encryption. Now I am dealing with some computational problems with integers or real-numbers (like arithmetic mean, standard deviation) where division is ...
0
votes
1answer
69 views

How Diffie-Hellman authentication works? [duplicate]

There are a lot of good videos on a simple Diffie-Hellman in the internet but unfortunately that is susceptible to the MITM attack. I understand how with DH the two parties are able to calculate a ...
1
vote
0answers
45 views

Caculated time One Point Multiplication with double and method

I am using double and add method for point multiplication in affine coordinates. How we compute 1PM in double and method? Di Wang said one point multiplication consists of repeated addition and ...
0
votes
0answers
51 views

Gaussian distribution in lattices

In many lattice based cryptosystems, Gaussian distribution is used. Can you explain why only Gaussian distribution is preferred?
4
votes
1answer
104 views

What does the probability subscript mean in Shannon's secrecy definition?

Shannon's secrecy can be defined as: $$P_M (M=m) = P_{SK,M}(M=m|E(SK,m)=c)$$ What does $P_M$ means? (same question for $P_{SK,M}$) I know that is the probability space M, M being the messages; I do ...
3
votes
1answer
54 views

What happens to NORX if the same (key, nonce, header data) triple is reused

As I understand it, reusing a (key, nonce, header data) triple in NORX leaks the XOR of the initial common prefix (but this is zero, so only its length is leaked) the XOR of the first distinct ...
1
vote
1answer
96 views

Fast MAC for 64-bit inputs

I am looking for a fast MAC (~few machine instructions) to be used for hash tables with 64-bit public inputs. I can't use SipHash as the hash function will be inlined in too many places and so the ...
4
votes
1answer
83 views

How to design a deliberately weak PRNG for experimentation?

I'm looking for a PRNG that is deliberately weak, that is, follows a set of rules stochasticly. For example: Encounters a set of bits that is a multiple of X, starts exhibiting bias, or starts to ...
3
votes
1answer
170 views

RSA private key finding method

Bob uses RSA with $p=83$ and $q=103$. His public key is $e=445$. Alice claims that she can calculate Bob's private key without using the definition $d=e^{−1}\bmod φ(n)$? But how?
1
vote
1answer
34 views

Determining collision resistance of a function?

I am having trouble trying to understand if the function is collision resistant. As I understand it, preimage resistance means that it is hard for an adversary to find two messages that produce the ...
1
vote
0answers
18 views

Attribute based access control and role based, online bookstore example

I am asked to answer a question that says: One online book-store wants to grand access to clients regarding their subscription. There are 3 types of subscriptions A , B and C. Customers get access ...
1
vote
1answer
56 views

Multi Authority Attribute Based Encryption Library

Anyone aware of a library that has MA-ABE implemented in any language preferably python? P/S - I hope this is the right place to ask this. Apologies if not, then a redirect will be appreciated
3
votes
1answer
66 views

The sign of the correlation in linear approximation

${\text{Let }}g:{\{ 0,1\} ^n} \to {\{ 0,1\} ^n}$ be a round function of an $n$-bit iterated block cipher and let $K \in {\{ 0,1\} ^n}$ be a fixed round-key, and denote ${g_K}(x) = g(x \oplus K).$ Show ...
0
votes
0answers
45 views

Have ciphertext and key but need to figure out encryption method

So I have a block cipher (I think) that I need to break. I have the ciphertext and the key, but not the method of encryption, and was wondering if anyone could help me figure that out? The key is a 9 ...
0
votes
0answers
30 views

AES Twofish Serpent [duplicate]

AES-Twofish-Serpent how to create this combo encryption? I am using Linux Mint and i want to encrypt few big folders in one folder, but to be hiden.
1
vote
1answer
42 views

OpenSSL & TLS1.2 with aes-cbc and initialization vector

I'm trying to manually decrypt DTLS traffic using OpenSSL and TLS 1.2. The cipher suite im using is AES256-SHA256 as listed here. Im able to decrypt the packets with the key that the server and the ...
0
votes
4answers
191 views

How is a message digest decrypted?

Trying to get my head around digital signatures and hit a slight block. The book I am using gives the following information Device A hashes a message to create a message digest Device A encrypts ...
0
votes
0answers
45 views

What are the pre-requisites I need to be able to code Salsa20 in C#?

I've taken a basic course in Cryptography and we've learnt various algorithms and their usage. I've implemented RC4 and Triple DES in C# with ASP.NET. For a project that I am a part of, I need to ...
1
vote
1answer
106 views

Ciphertext with uneven letter distribution

I have a ciphertext encrypted with an unknown method. It is part of a challenge (personal quest), so I can not post it. The letter statistics is the following: ...
5
votes
2answers
102 views

Is reusing keys for CBC and CBC-MAC secure when using encrypt-then-MAC?

I know reusing keys is a bad idea, especially for CBC and CBC-MAC, but the example for why on Wikipedia seemed to use encrypt-and-MAC. It seems obvious that the last block of encryption will be equal ...
2
votes
2answers
93 views

Linear cryptanalysis complete key guessing

In linear crypt analysis, partial sub keys are guessed and verified for its correctness with the help of plaintext and ciphertext. From the partial sub key, how it is possible to guess the complete ...
0
votes
3answers
78 views

What is the time requirement for pairing computation and modular exponentiation?

I want to design a cryptographic protocol for encrypted search without pairing. I have seen some papers for protocols without pairing. How would I compare pairing computation and modular operations?
1
vote
1answer
99 views

Why does a fixed key not make MACs like CBC-MAC or GMAC into secure hash functions? [duplicate]

Why does setting the secret key to a fixed, public value not make MACs like CBC-MAC or EMAC into secure unkeyed cryptographic hash functions? In other words, why is the resulting hash function not ...
1
vote
0answers
26 views

How do you apply bilinear mapping to attribute based encryption?

I'm new to both bilinear mapping and ABE. I have a vague idea of how bilinear mapping works now, but I don't understand how it applies to ABE. Can someone give me an example?
1
vote
0answers
106 views

Breaking Vigenere via Kasiski/Babbage method? (non-programmatic)

I'm really hoping someone can explain to me what is going on in the second major component of this form of analysis. If you wish, for convenience, here's a page that already has some ciphered text ...
-1
votes
1answer
95 views

Need CryptDeriveKey AES implementation in C#

I am integrating with 3rd party software that uses AES 128 encryption. I know this is not ideal, but the choice of encryption is up to the 3rd party software. I am using C#. My problem is in deriving ...
0
votes
0answers
29 views

Permuted Hash Table

Suppose we have a hash table, $HT$, consisting of $100$ bins.The hash table uses a hash function $H$ that is public. We all know that given value $a$ we can compute the address in the hash by $H(a)=j$...
0
votes
0answers
36 views

Poly1305 vs VMAC: is VMAC much better for long messages?

VMAC seems to me much more secure than Poly1305 on long messages (the security of the latter decreases linearly with increasing message length). Is this of practical relevance?
1
vote
2answers
256 views

AES128 Decryption in Objective-C just slightly off

I have been asked to integrate a home-grown CRM system with a 3rd-party data service provider (DSP). The DSP has encrypted the information they are providing. I only have their decryption ...
1
vote
1answer
184 views

RSA PKCS#1, v1.5 padding output

If I make use of RSA PKCS#1 in v1.5 what padding length is used. Basically, it is not allowed that the plaintext is bigger than the modulus. But what if the length in bits is the same (padding to ...
3
votes
1answer
41 views

Updating values authenticated by Merkle Tree

Assume we have 4 values: $v_1,v_2,v_3$ and $v_4$. We construct a Merkle tree on top of them such that the values are leaves of the tree. I send the values and the tree to an untrusted server. But I ...
0
votes
2answers
45 views

OpenSSL Signature different each time

I have a file that I am generating a signature for using OpenSSL, and each time I generate the signature, it is different to the last time. ...
1
vote
3answers
138 views

Is multiplicative blinding less secure than additive?

It's easy to see that additive blinding (e.g., $x+r$ for secret x and random r) is perfectly secure in a finite field (this is a one-time-pad) and statistically secure for $r$ uniformly distributed in ...
7
votes
2answers
844 views

Is there a null HMAC?

I came up with this question while unit testing a function that includes an HMAC. What is the expected behavior of an HMAC with a well-defined key and a set of data with no elements in it? Is there ...
3
votes
1answer
84 views

What is wrong with simple concatenation in salted password hashes?

I once heard that if implementing a password hashing scheme, simply concatenating the password and salt together before hashing could lead to some subtle vulnerabilities, and I'm trying to figure out ...
-1
votes
1answer
104 views

How to find roots of equation $f(x)=0 \pmod p $, where $p$ is prime number?

$f(x)$is any nth degree equation $n>0$, how to find roots of $f(x)$ over prime modulo.
4
votes
2answers
95 views

Research for video game: Novice cryptography concepts [closed]

I'm making a video game which has some basic cryptography as a main base for puzzle design. I'm hoping players will get great puzzle challenge and learn a few cryptography concepts through playing the ...
1
vote
1answer
30 views

Cardholder to Merchant SET Protocol

I have some doubts regarding the SET protocol. Let say the Alice payment information runs through a sha-1 hash function which is a one-way algorithm, irreversible to create a message digest. How do ...
3
votes
3answers
37 views

What are possible caveats when generating a group for use as parameters for Diffie-Hellman key exchange?

As reusing a widely used group for Diffie-Hellman key exchanges might lead to far easier third-party key discovery through precomputation for that specific group, I would like to know what can ...

15 30 50 per page