2
votes
1answer
60 views

How to prove a lemma that is based on phi-hiding assumption?

Assume that the $\phi$-hiding assumption is true, i.e. that for a composite number $m$, a PPT adversary A cannot distinguish between a prime $p_0$ that divides $\phi(m)$ and another prime $p_1$ that ...
8
votes
3answers
256 views

How secure is AES-256, but with an effective key length of 56-bits?

I need to encrypt a few drives using Kaspersky Total Security. I however noted something peculiar, Kaspersky's description of their cipher is: Data will be protected using AES-256 encryption ...
2
votes
1answer
83 views

Reversing a known encryption algorithm (4-byte repeating key XOR)

I've been practicing for an upcoming CTF competition, and I've finally reached the cryptography stage. I'm a complete newbie in this field (my knowledge is essentially that bcrypt is awesome and md5 ...
-1
votes
0answers
37 views

Problem of revealing master secret key of others in identity-based encryption (ECDLP)

Please help me to consider the case where Server B tries to get the same master secret key of Server A. Server B ask private key for IDA from Server A. Then Server B extracts private key for same ...
1
vote
1answer
102 views

Encrypting and Authenticating The Simplex Communication Between Embedded Devices

I am planning to build temperature sensor nodes for my home heater control. Central device will control the heater using temperature data read by nodes. These nodes will send temperature data to ...
1
vote
0answers
25 views

Deriving Minimum Description Length of Substitution Key

Given a plaintext: Now is the time for all good men to come to the aid of their country because the quick brown fox jumped over the lazy dog. and a substitution ciphertext: Mpe od yjr yo,r ...
2
votes
2answers
83 views

comparison of security for identity based signature and Hashing (SHA-1) the identities

I would like to know which method can provide better security: using identity based signature or hashing the identities and message (using SHA-1) for authentication?
2
votes
1answer
33 views

How to select a good scale for letter frequency in a text?

I needed to use a scale in a code to determine which sentence in a file has been encrypted by a single-character key. The scale that i currently used is: +2 for every occurrence of a vowel or a ...
3
votes
1answer
53 views

How to verify a sever's ECDSA fingerprint during SSH

I have read somewhere that Servers which have SSH access for users in the public can have their public key posted publicly (e.g., on a website), so that people who access such a server using SSH can ...
3
votes
2answers
612 views

Creating serial key generator using ECDSA, how to get signature short enough?

I've written some questions in this stackoverflow and got great responses but now I'm trying to wrap it all together. I have for the last couple of weeks been building a serial key generator project ...
0
votes
1answer
475 views

Existential Unforgeability of signature scheme against Adaptive Chosen Message Attack

While reading a literature on signature schemes, I came across the concept of Existential Unforgeability of signature scheme against Adaptive Chosen Message Attack. Can anyone point me to the paper ...
0
votes
1answer
47 views

Using Shor's algorithm to solve the discrete logarithm problem

I have read about Shor's algorithm and my understanding is that it can be used to factor large numbers efficiently. Can Shor's algorithm, though, be used to solve this problem: Find the number $e$ ...
1
vote
1answer
33 views

How can I determine key length for message encrypted by many-time-pad?

For message $ m $ and key $ k $ I get encrypted message $ c $ ($ m \oplus k = c $) where $ length(k) < length(m) $. Additionally I know that message $ m $ is English text. Instead of using pure ...
1
vote
1answer
26 views

Which one is correct probability formula for the same master secret value in identity-based encryption

Assume two servers $(n=2)$ use the same domain curve parameters and same hash function $H:\{0,1\}^{*} \rightarrow G_{1}$ . Then the hash value for the same identity falls in same result and let it be ...
0
votes
1answer
68 views

Possibility for same Private Key Generation in identity-based encryption

In private key generation of IBE scheme, private key is generated as follows: $SK_{ID}=s.H(ID)$ Suppose two servers use the same curve domain parameters. If PKG on server A generates private key $SK_{...
3
votes
1answer
82 views

RSA Digital Signature vs Elgamal Digital Signature

What are the advantages of RSA signatures against ElGamal signatures? Is there a situation in which it would be better e.g. to use RSA signatures?
2
votes
1answer
147 views

In HMQV, can one use multiple identities with one public key?

The HMQV protocol has 2 "identity" fields $\hat{A}, \hat{B}$ that are used in the dual signature - and it tries to guarantee that any properly-generated session key is only shared by a single $(A, B, \...
0
votes
0answers
44 views

How to encrypt huge data using RSA? [duplicate]

Is there any way to encrypt the huge amount of data using RSA? I was supposed it is possible but when I read some articles what I saw is that, this is bad practice or they say can only encrypt bit ...
3
votes
1answer
59 views

Plotting Running Times of SAT solver

In the the paper "Efficient Methods for Conversion and Solution of Sparse Systems of Low-Degree Multivariate Polynomials over GF(2) via SAT-Solvers" there is a Figure that I can not understand and I ...
2
votes
0answers
25 views

Why SSH does not use a certificate authority in the same way as SSL [closed]

SSL requires the use of a trusted third party -- the certificate authority to verify a public key presented by a server to a client. SSH on the other hand relies on the client having the server's ...
3
votes
1answer
66 views

How can I create pre-determined encrypted results?

I want my encryption results to be the lyrics to Star Spangled Banner. The original text I'm encrypting would be, for instance, the menu to a local pizza place. I know what I want my passphrase to be. ...
3
votes
2answers
134 views

What is a purpose of reducing lattice basis?

This may be too broad question but it is not. I have been studying lattices for few months now, more specifically I studied: lattice problems ($SVP$, $CVP$ and etc.) lattice cryptography in post ...
3
votes
1answer
36 views

Is there a way to turn a PGP key into its semi-prime counterpart?

From my understanding of PGP keys they use the RSA algorithms to encrypt/decrypt messages. So, I know that the RSA algorithms use a semi-prime number to encrypt/decrypt messages. So, what I was ...
2
votes
1answer
68 views

Are the following schemes based on a pseudo-random permutation secure?

I am currently working on the following task: Let F be a pseudorandom permutation. Consider the encryption scheme for the message space $\{0, 1\}^n$ defined as follows: $Gen(1^n)$ chooses ...
2
votes
1answer
43 views

How would you name and/or describe this algorithm?

First up: this is not a decoding request or anything. This is about terminology. Twice per year, we email another department to ask for a new licence file for their software. They are always slow to ...
1
vote
2answers
86 views

Levels of strength: The Caesar Cipher

SITREP: I am deciding what form of "Random" Number generation would fit best for a Caesar Cipher that encrypts each letter with a different integer as a shift. This encryption is being handled via C# ...
0
votes
1answer
95 views

How are security proofs done in ABE Schemes?

I have been studying several ABE schemes and I understand the security assumptions and the several types of security models used for the security game between the Challenger and the Adversary. What ...
0
votes
0answers
4 views

encryption used by onepass [migrated]

I use a password storage application on my mac called 1password ( see here: https://1password.com/). I was wondering if it encrypts the data it stores in my computer and decrypts it using a key made ...
0
votes
1answer
64 views

How to decrypt an RSA ciphertext given an oracle providing the lower 8 bits of decryptions?

I have access to an oracle that can encrypt and partially decrypt a number with RSA-1024 algorithm. For encryption: \begin{equation} C = M^e\bmod n \end{equation} But for decryption, result will ...
2
votes
1answer
72 views

Exponential cipher theory misunderstanding

Say I pick modulus $m=2633$ and key $e=13$ My private key $d$ is $13$ inverse in $\bmod 2632$ which I need to compute $(e,m)$ is my public key that anyone can use to encrypt message for me and then ...
0
votes
0answers
70 views

RSA PlainText without Knowing Private Key

I couldn't solve this problem for three days... In RSA, [n = 13, 19] [e = 3] c1 = m^3 = 83 mod 247 [e=5] c2 = m^5 = 97 mod 247 then, use ...
5
votes
1answer
70 views

How do Käsper and Schwabe's Bitsliced AES Mixcolumns work?

The only way I see it possible to do the matrix-multiplication in the MixColumns operation of AES is by shifting the bits in the multiplied number, and then reduce with the polynomial if needed. ...
0
votes
0answers
27 views

correlation between the timing data produced by different keys with similar inputs in AES

Is there or can there be any correlation between the timing data produced by different keys with similar inputs in AES? If yes, what type of correlation?
1
vote
0answers
20 views

How share size is reduced in robust secret sharing?

THIS IS ROBUST SECRET SHARING SCHEME The dealer $\mathcal{D}$ wants to share a secret among the participants $\{P_1, P_2, \ldots, P_n\}$, where at most $t$ participants are malicious and $t<n/2$. ...
1
vote
0answers
37 views

Truly Random Values [duplicate]

I am trying to build a one-time pad encryption software and I am thinking about simply using /dev/random to generate keys. My question is: Is it ...
2
votes
1answer
208 views

Mathematical formula for switching the key for OTP?

Instead of generating the random key for the one time pad cipher over and over again, is there a mathematical formula that allows you to switch the key to a new key? The new key must be as random and ...
5
votes
1answer
411 views

Is my password entropy calculation correct?

I have a password with a prescribed format: 111 + “2 Random lowercase letters” + “random digit” As you can see, it starts with a fixed value of ...
0
votes
0answers
68 views

Compute Modulo exponentiation with prime powers

The problem is to find x such that $$x = M^d \mod p^2$$, where M and d are large numbers, and p is a large prime. Ideally we only want to compute $M^d\mod p$ and then use the result to further ...
0
votes
0answers
30 views

Has this forum been compromised by the NSA BULLRUN programme? [migrated]

Today, this site shows 24 thousand users in Cryptography. It runs in parallel with and is associated with StackOverflow boasting 6 million users. This site then clearly creates some leverage and ...
0
votes
1answer
58 views

How hard is it to generate a simultaneous MD5 and SHA1 collision?

I was recently reading that MD5 is "broken" because it's pretty easy to generate collisions (like 2^(L/2)). And the SHA1 (theoretically) fares no better. The ...
0
votes
1answer
21 views

Hash system to generate same (specified) hash from multiple datasets?

I have a hashed value $X$ and need to ensure that any of the data sets $D_1...D_n$ can be concatenated with a correctional value $C_1...C_n$ and passed into a hashing algorithm to result in the value ...
1
vote
0answers
38 views

Countering Cryptographic Attacks

By reading Camellia Design and Analysis document following is my understanding about few cryptographic attacks from designer point of view. Differential and Linear Crypt-analysis. Number of Active ...
2
votes
6answers
2k views

How secure will this be against brute-force attacks?

I'm looking into encrypting files like this: First, I SHA-1 hash the password. Let's say the password is something normal like "hello123", and then hashed. Then I encrypt a file using this: ...
20
votes
6answers
4k views

Did a certain cryptography method get abandoned due to security flaws in the past?

I am researching how quantum computers affect current encryption methods (RSA and more). However, I remember learning in a course that there used to be a particular encryption method which was ...
1
vote
2answers
34 views

What are KDF parameters in OpenSSL command-line utility for `enc`?

I refer to https://www.openssl.org/docs/manmaster/apps/enc.html and see that the only parameter for key derivation which I can set explicitly (not considering the obvious ...

15 30 50 per page