1
vote
1answer
25 views

Renewing session key

I have a system which (should) never shut down, there are keep alive messages every 30 seconds and normal traffic is very variable, might be a few KB/sec might be nothing more than the keep alive ...
1
vote
0answers
29 views

Proper way to generate symmetric keys

I'm trying to educate my self in key management, how to store them, how to generate them, how to use them properly. I've been trying to find how you would generate a key for symmetric encryption (say ...
0
votes
1answer
29 views

Key derivation design to avoid key leaks

I have the first function that generates keys from AES decryption (128-bit key). It takes seed as input: ...
0
votes
2answers
19 views

Why does spiped use both nonces and ephemeral keys?

Colin Percival's spiped utility uses a pre-shared key and Diffie-Hellman with ephemeral keys to provide forward secrecy. The protocol is summarized in the ...
1
vote
1answer
31 views

The non-interactive proof of verifiable computation: Pinocchio

I am reading the Pinocchio paper. The paper says, in paragraph "polynomial asymptotics" of section 4.2.1, a worker, in order to include $h(s)$ into the proof, has to interpolate $p(x)$, and then ...
1
vote
1answer
37 views

Given an encrypted file, what are possible ways to find its encryption algorithm?

Given an encrypted file, what are possible ways to find its encryption algorithm? Heuristic ways are okay as well.
-1
votes
0answers
25 views

Disabling CBC ciphers does not stop Chrome from negotiating to use CBC ciphers [migrated]

I am getting an message about 'obsolete cryptography' from Chrome. Your connection to (site) is encrypted with obsolete cryptography. The connection is encrypted using AES_256_CBC... Per ...
1
vote
1answer
33 views

What is a good way to handle longer strings using FPE?

While experimenting with this FPE based on FE1 http://botan.randombit.net/manual/fpe.html (well actually a port of it in C#) I found when the string length gets too long (number of characters N) ...
1
vote
1answer
109 views

Is encryption time greater than decryption time?

Is encryption time always greater than decryption time for all encryption techniques (AES / DES / RSA / DNA), or is there a mistake somewhere in my implementation?
-1
votes
0answers
15 views

SSL-connection between client and server: how can one make this connection secure?

Suppose a browser C is setting up a SSL-connection with a server S. Then after C has initiated the connection with S by sending a "hello"-message and nonce, S sends back a nonce and a certificate ...
2
votes
2answers
67 views

Mutual verification of shared secret

Is it possible to develop a scheme where two parties, unsure if they have the same secret, can verify that the other does or does not share the same secret, without one party being able to cheat and ...
0
votes
0answers
43 views

How to map a handful of numbers in a large range to a much smaller range deterministically without collissions

I want to map a set of long integers (say around 100 different values) that can span the entire 64 bit integer range to a much smaller range such as from 0 to 25000 deterministically with almost zero ...
0
votes
0answers
26 views

Does “identity-based dynamic threshold signature” exist and could such scheme contain a “Signature Combination” algorithm?

I came across [1] and I'm very puzzled by this paper. They use a building block which they call "identity-based dynamic threshold (IBDT) signature", citing paper [2]. First of all [2] does use this ...
3
votes
2answers
236 views

Brute-force attack given small search-space and hash prefix

Suppose we have a value $secret which is a random 56-bit (7-byte) string. Suppose an adversary wishes to discover $secret. The ...
1
vote
1answer
53 views

What is the “Walsh Function” about?

I'm currently dealing on the so called “Walsh Function” (WF) that is written like: $$f^W(a)=\sum_{x\in{F^n_2}}(-1)^{f(x)+(a,x)}$$ What I know is that this function is used to approximate an arbitrary ...
-2
votes
1answer
62 views

How difficult is homomorphic encryption? [closed]

I want to learn more about homomorphic encryption and eventually make a career from it. Currently, I'm thinking to have my bachelor degree in this field. What background should I have for this ? How ...
0
votes
0answers
32 views

Can I place a private key on a sim card? [migrated]

After google searching about this idea and yielding very little in results I've come to resort to stack exchange: Is it possible to place a private key on a sim card? Is it possible for a smart ...
2
votes
2answers
65 views

How to calculate if probability is negligible or not

If i have probability $Q = 2C(A\times B)$ where $A$ and $B$ are unknown probabilities and $C$ is a non-negligible probability, what can i speculate about probability $Q$ and how can i calculate bounds ...
0
votes
1answer
107 views

security proof in pairing based cryptography

Let : $G_{0}$ and $G_{1}$ be two multiplicative cyclic groups of prime order $p$. $g$ is a generator of $G_{0}$ and $e$ is a bilinear map, $e : G0 × G0 → G1.$ $𝐶_{1} = 𝑔^{𝛽𝑠_{1}} $, $ 𝐶_{2} = ...
0
votes
1answer
23 views

How openssl padding for AES cfb IV?

From a few documents I have read and a few questions about padding here, I think if I passed a encrypted text fewer than BLOCK SIZE, openssl would pad it per PKCS7. And use that padded encrypted text ...
1
vote
1answer
59 views

Special case of format-preserving encryption

Is there encryption algorithm with the following properties? We always have plaintext in natural language, and the produced ciphertext is also in natural language.
-1
votes
0answers
23 views

RSA : Is finding Public key given Private key as hard as finding Private key given Public key? [duplicate]

The question is quite straightforward : In RSA, is finding Public key given Private key is as hard as finding Private key given Public key? If no, can you explain why?
2
votes
1answer
81 views

What does signed fixed window method mean in ECC?

I am studying (sliding) window method in Elliptic Curve Cryptography (ECC) but I am confused by the term, signed fixed window method. By the way term is used in a research paper and not in the book ...
0
votes
1answer
42 views

Encrypt file name

I'm looking to encrypt (rename) mutiple files name based on a passphrase. Currently the passphrase would be numeric but I can change that to something else if required. I would like to be able to ...
1
vote
2answers
261 views

Is ECB mode safe to use with RSA encryption? [duplicate]

Firstly, bear with me, I'm relatively new to cryptography. In a recent static analysis scan of our application, one of the findings complained that we are using ECB: A mode of operation of a block ...
0
votes
0answers
63 views

How do I prove IND-CPA security of RSA-OAEP?

How do I prove that RSA-OAEP is IND-CPA secure? It would be very good to show how to prove it formally, but an informal proof would also be enough. Because of the random number in RSA-OAEP, RSA gets ...
2
votes
1answer
58 views

Optimal bandwidth cost for Oblivious RAM

Goldreich and Ostrovsky show that any ORAM algorithm must have bandwidth cost $\Omega(logN)$, where $N$ is the total number of blocks outsourced. This is in Theorem C of this paper. But they didn't ...
0
votes
0answers
41 views

trying to get calculator and RSA calculatin does not make sense [duplicate]

got two question, I am novice in the area of crypto and currently in big learning curve. From crypto book I am going over with, I see the RSA algorithm example as follows: it chose two rand #-s: ...
0
votes
1answer
74 views

where can i learn the basics of AES?

i was tasked with making an expo about AES and its steps, but i still cant grasp it, especially when it comes to "key schedule". anyone knows some good material to start learning? or someone can give ...
0
votes
0answers
19 views

RFC 5297 implementation [duplicate]

I am looking for an implementation of RFC 5297 algorithm using javascript. I would like to see how to wrap a key on client side web browser, like Mozilla's fxa-auth-client (That uses a xor to wrap) ...
0
votes
0answers
27 views

Can I submit an encrypted message to see if its breakable here? [migrated]

For some reason I have been thinking a lot about encryption lately. I'm a CS major, but an encryption novice. The skeptic in me feels making a code that uses a fairly simple algorithm would be a lot ...
0
votes
0answers
62 views

Why is it a bad idea to use Diffie-Hellman with a prime such that $p - 1$ is smooth?

I recently stumbled upon another question in which somebody menitoned that using custom primes for DH is safe if you keep in mind, that $p-1$ should not be a smooth number. Why is that?
1
vote
1answer
58 views

How to decrypt unusual Many Time Pad

How does one decrypt the many time pad: ($R$ is a random string, $C$ is ciphertext, $P$ is plaintext) $R_0 \oplus R_1 = C_0$ $R_2 \oplus R_1 = C_1$ $P_0 \oplus R_1 = C_2$ assuming that $R_n$ are ...
2
votes
0answers
105 views

Simplicity and precision in cryptography papers

I know a PhD student who recently had his paper on applied cryptography rejected because one the reviewers claimed that it was "the solution was too simple and the notation used was more than ...
2
votes
0answers
58 views

Energy necessary for brute-forcing or decryption

I am trying to understand how the physical limits of computation apply to crytography, and came up with the scenario below as a sort of gedanken. I would be grateful to see how others answer it. ...
0
votes
0answers
42 views

Decypting a Stream Cipher

I am trying to decrypt a stream cipher. I know what the first word of the message is when decrypted but I am unsure how to decrpyt the rest of the message. I know what the first word is because I ...
1
vote
1answer
53 views

Clefia Vs AES 128 bit

I am running a comparison between Clefia (Lightweight cipher from Sony Corporation which is a standard now http://www.sony.net/Products/cryptography/clefia/standard/index.html) and AES 128 bit. The ...
1
vote
1answer
68 views

Format preserving encryption FFX

In FFX mode the format of the ciphertext is same as plaintext. How does it ensure data integrity and authentication? Is there any bit flip attack in FFX mode? Is it malleable?
1
vote
1answer
52 views

SipHash - 64 bit (second) preimage security?

I was not able to find an explicit statement about the first and second preimage security of SipHash-2-4 or SipHash-4-8 anywhere. I think it should be 64 bit, but I'd feel safer if somebody who has ...
0
votes
1answer
40 views

Is it a bad idea to use PGP encryption for structured/predictable data?

I'm working on an app and need to encrypt some structured data. The data will be turned into a string form (JSON) before getting encrypted. The data format I'm using will always start with a ...
0
votes
1answer
102 views

Are there any quantum-resistant symmetric encryption schemes?

It seems that quite a few currently available encryption schemes will possibly be broken by quantum computing. Are there any symmetric encryption schemes that will remain unbroken (either because of ...
0
votes
0answers
16 views

Does Windows CNG store private information using LSA secrets?

I read that LSA Secrets have the capability of storing data privately, more importantly, ensuring that users without proper permissions cannot access that same data. Windows CNG has security measure ...
2
votes
2answers
71 views

PGP digital signature vs SHA256 HMAC Comparison

First let me admit that I am not a mathematician or a cryptographer. I am responsible for assisting in making a recommendation on a project that is consolidating payment processes within a company's ...
0
votes
1answer
24 views

How to select a 'tweak' used in FE1 mode format preserving encryption?

I'm experimenting with this library Botan which includes a module for format preserving encryption based on FE1 mode. The parameters for the Encrypt method are as follows ...
0
votes
0answers
16 views

What is sLHAE (stateful length-hiding authenticated encryption)?

Can somebody please explaint me how does sLHAE works in TLS? I met this term in some TLS papers and struggled to understand how it works, specifically the "length-hiding" part.As to my understanding ...
1
vote
1answer
47 views

Can Winternitz be easily converted to a many-time encryption scheme?

The Winternitz scheme is typically cited as being an OTS scheme. Can it also be used as a one-time encryption scheme? If it can be used as a one-time encryption scheme, then is it possible to easily ...
1
vote
3answers
306 views

Block cipher does not provide security by itself

What is this statement all about? When I look at a block cipher it seems pretty hard to break it and the mathematics behind insure a good complexity. It may refer to key generation, initialization ...
2
votes
2answers
69 views

Is it safe to use a secret salted hash of a public id for client to prove ownership of id to a server that knows salt but does not store ids?

I am writing a peering server - the server assigns randomly generated public IDs to users, and I want users to be able to reclaim their ids in the future, but only to be able to claim ids that they ...
2
votes
4answers
63 views

Definition of the term “key”

I've looked in many places (NIST, text books, online resources) and I cannot find an answer to the definition of the term "key" from a semantic point of view. Is it the "key" to cipher-texts (i.e. ...
0
votes
0answers
23 views

Does Paillier Cryptosystem work in different message space? [duplicate]

I have a question about Paillier Cryptosystem. Assuming we have $c = Enc(m) = g^m \cdot r^N \mod N^2$ as the output of encryption algorithm, where $N=p_1p_2$ and $m \in \mathbb{Z}_q \subset ...

15 30 50 per page