0
votes
1answer
24 views

How to run a (provably probably) secure global referendum?

The following question is extremely broad and speculative, for which I apologize, but it strikes me as exceedingly important, so I will ask it nonetheless. Suppose an event of global significance ...
-1
votes
0answers
27 views

How to perform collision attack [duplicate]

If I have a table that has many HASHs for some data, is it possible to guess some data by using collision attack i.e. if I used brute-force on the output of 32-bit hash algorithm and find matching ...
6
votes
2answers
94 views

Is there a theorem to determine the elliptic curve parameters based on the group order?

By Hasse's theorem we know that range of the group order of the elliptic curve. And similarly, there exist a theorem on the admissible order of elliptic curves. Suppose by the theorem on the ...
7
votes
3answers
176 views

Generating random non-repeating numbers from a small group

I read this Q&A which gave a clever solution: feed an incrementing index into a block key cipher as a way of producing non-repeating random numbers. The problem is the block size of all the good ...
1
vote
0answers
22 views

Are the prime numbers used for RSA encryption known? [duplicate]

I read that one reason why RSA is secure is because it uses a huge number that's called the modulus which is the product of two prime numbers. For maths reasons the prime numbers being prime numbers ...
-1
votes
0answers
34 views

Which are similar encryption techniques as honey encryption?

I was reading about this technique called "Honey Encryption." Can someone suggest encryption techniques similar to honey encryption? To know more about honey encryption please refer the link ...
4
votes
2answers
122 views

Integer factorization still hard with Hamming weight hypothesis?

Consider the following problem: Factorize a $n$-bit integer $c$ knowing that it is the product of two integers with known Hamming weight $h$. Is there a way to prove that this is still hard? I have ...
0
votes
0answers
19 views

Can you have partial cryptographic obfuscation (without a trusted setup)?

Cryptographic Obfuscation is a powerful cryptographic technique. My question is, can you do it partially? Instead of obfuscating an algorithm completely, you can have an algorithm with a couple of ...
3
votes
1answer
34 views

Two or more initialization vectors with the same key

I'm studying about WEP and I'm in doubt. It seems that because it uses a initialization vector of 24 bits, which is relatively short, is easy to determine which key was used to encrypt the data. But ...
-1
votes
0answers
46 views

Meaning of “random n/2 bit prime length prime p”

iam trying to solve a homework for the subject "system security" at university. For my question iam referring to this document: Solution to the Millionaire's Problem Could you please tell me why in ...
5
votes
1answer
48 views

State of the art low memory arbitrary-domain PRP?

I am wondering what the state of the art is on low memory arbitrary-domain PRPs. That is, I'm looking for an algorithm that implements bijective function $PRP : \mathbb{Z}_n \times \{0, 1\}^b ...
0
votes
0answers
20 views

If one has hash = hash(salt + password) and one knows N pair of hash and salt is it easier to attack the password?

For example: $hash = md5($salt + $password) I know N pairs $hash $salt 60d0c34a37a71b279edaae4ffdcba86d 1 1d79c99d01f51f8e8b4c6505e8f6728e 2 ... Is it possible ...
1
vote
1answer
41 views

Security implication of deriving key with fixed salt for files authentication

Context: I need to calculate MAC for a collection of files just for future integrity and authentication verification. This is the conceptual order of steps: Derive a 64 bytes key from user input ...
0
votes
0answers
25 views

How is Extended Euclidean Algorithm related to Approximate-GCD problem?

I had a doubt regarding the connection between the Extended Euclidean Algorithm and the Approximate-GCD problem. Are there any relations? i.e., the hardness of A-GCD is derived from EEA. Is there any ...
3
votes
2answers
59 views

How to implement 1-out-of-n OT from 1-out-of-2 OT?

How can I implement a 1-out-of-$n$ oblivious transfer protocol from 1-out-of-2 OT protocol which is resistant against passive corruption? Assume we can access 1-out-of-2 OT $n$ times.
0
votes
1answer
44 views

Security of DGHV Encryption

In DGHV Security How to get reliable oracle for least significant bit and then uses binary GCD algorothm that uses reliable oracle to find secret key p.Also what is oracle. Is this a turing ...
-1
votes
0answers
41 views

Is the following obfuscation weak in security or not?

$q=$large prime number secret key=$(x,z)$ $f(x,z)=(x/z)* y$ , to hide $y$ $x \leftarrow (1,2,3,...,q)$ $z \leftarrow (1,2,3,...,q)$ $y \leftarrow (1,2,3,...,q)$ Is the obfuscation function $f(x,z)$ ...
1
vote
1answer
49 views

Differences between OWP and OWF and their IND-CPA security

I am learning about one way permutations and one way functions and am not sure of the differences if there are any. Also in the random oracle model are they both IND-CPA secure?
1
vote
0answers
48 views

Given a public-key encryption and signature scheme, define a new primitive

I'm new to cryptography and am currently working on the following question: Say you are given a public-key encryption scheme $\Pi_e=(\mathcal{K}_e,\mathcal{E},\mathcal{D})$ and a signature scheme ...
1
vote
1answer
29 views

Would A5/1 with a much larger state be a good choice of stream cipher for hardware?

Would A5/1 with a much larger state be a good choice of stream cipher for hardware? Assume that a reasonable choice of MAC is made such as GMAC, with the first 128 bits of the stream cipher output ...
0
votes
1answer
53 views

Is AES-CTR or ChaCha20 vulnerable to a time-memory trade off?

Is AES-CTR or ChaCha20 vulnerable to a time-memory trade-off attack? According to this paper it seems to be, which would put AES-CTR at a clearly breakable $2^{64}$ security level (for AES-128-CTR). ...
0
votes
1answer
107 views

Two-party equality computation

Alice and Bob each secretly chooses an integer between 1 and 10, a and b. They want to know (with high probability) whether or ...
0
votes
1answer
32 views

Subscript R notation for the finite fields

I'm trying to understand the notation used in the literature for Pairing-based cryptography. I know (and I hope I've understood it well) from Wikipedia that $\mathbb{Z}_p$ is the finite field of ...
-1
votes
1answer
52 views

can pdfcrack software crack a 128 bit encrypted pdf file

One day ago,i downloaded a pdf that requires password then i search a software to decrypt the password that's s/w called pdfcrack Then i install pdfcrack and run a cmd in terminal pdfcrack -f ...
0
votes
1answer
28 views

Is it possible for the Rho method against an Elliptic Curve to take more than the sqrt of the total state space?

Is it possible for the Rho method against an Elliptic Curve to take more than the sqrt of the total state space? It the reason why this is not generally done because of a meet-in-the-middle attack?
3
votes
2answers
60 views

A bijective hash function

Suppose: $H: \{0,1\}^{n} \rightarrow \{0,1\}^{n}$. $H$ is bijective. It is difficult to derive $x$ from $H(x)$. Is this type of function possible? What would the strength of it be? I realize that ...
1
vote
1answer
25 views

Multiplexed stream cipher

Consider the stream cipher that consists of 3 LFSRs, with the output of one coming being used to determine which of the other 2 is used that clock cycle. Both the IV and the polynomials are secret. ...
3
votes
1answer
43 views

(How) Can we use HOTP for file encryption?

I recently went through the list of available KeePass plug-ins and noticed one that advertises support for HOTP as a means to derive the database key. Now I trust the developer of this plug-in who is ...
1
vote
1answer
27 views

Encryption strength when using a PBKDF

Suppose: $m$ is a positive integer. $n=2 \times m$. $H: \{0,1\}^{*} \rightarrow \{0,1\}^n$. $p$ is a password. $s$ is a salt. $K=\{0,1\}^n$ is the derived key. $PBKDF(p,s)$ derives a key from $p$ ...
-3
votes
1answer
91 views

How to Perform Computation on AES Encrypted Data

I have this code that successfully performs symmetric encryption using AES algorithm. How can I go about performing computation on it to achieve somewhat homomorphic encryption? ...
3
votes
1answer
68 views

How to prove hardness of approximate-GCD problem?

I am trying to prove the security of my system using the hardness assumption of the approximate-GCD problem using contradiction, i.e. If the attacker is able to break in our scheme, then attacker ...
3
votes
2answers
539 views

Why can't we use the first block of AES-CBC as MAC

As per topic, why can't we use the first block as MAC instead of using the last block? what's the rationale?
0
votes
1answer
36 views

Robust combination of two Password Based KDFs

I am researching some different constructions for combining two Password Based Key Derivation Functions in a robust manner to prevent weaknesses in a single algorithm from reducing the security of the ...
3
votes
1answer
36 views

Is LUKS Anti-Forensic information splitter (AFsplit) indistinguishable from random data?

I want to know if AFsplit(random_data_input, stripes, digestmod=sha) output is indistinguishable from random data. The purpose ...
0
votes
2answers
51 views

Stripping off message authentication or signature

If attackers can strip off RSA / EC / -DSA digital signature and conduct CCA on AES-CTR or CBC payload, why can't they do the same for AES-GCM?
8
votes
1answer
102 views

How do voters verify a Helios (v3) election result?

So from my understanding of verification specification version 3, a Helios election proceeds as follows: A voter retrieves the system's public key to encrypt their vote & submit it. The voter ...
0
votes
1answer
52 views

Is it possible to brute-force a hash algorithm of 32 bits

I have a 30000 user passwords and usernames stored in a table on a database in which the passwords are stored as hash where ,I need to guess the passwords for all users and I have the hash function ...
1
vote
1answer
35 views

How to use AES-CBC to password-encrypt a small block of stored data

I have a small block of data (16 bytes) that I am required to encrypt, store (in an unsecure, visible location). Later I have to retrieve and decrypt it. I must use AES-CBC and a user-entered ...
0
votes
1answer
51 views

Homomorphic Encryption or not

I am a beginner to homomorphic encryption scheme. As far as I think, it is just a kind of concealing real value without using standard encryption algorithms such as AES,DES or RSA. For example , for ...
1
vote
0answers
46 views

Format Preserving Encryption FF1 Samples

NIST published methods for Format-Preserving Encryption and there is a link in the document giving examples for FF1 methods. I am confused by the value of R given in the examples. $R$ is the output ...
0
votes
2answers
77 views

SHA1 collision for first 32 bits for two different message

Is it possible to create a program to find the collision of 2 different message but with same first 32 bits using sha1 hashing? I tried using a while loop but it run endlessly as though no match is ...
2
votes
0answers
57 views

AES encryption time difference for same data [duplicate]

When encrypting same data with AES, encryption time for the first encryption is longer than the second one. In the same program, I have written encrypt() function ...
2
votes
1answer
110 views

Top notation as exponent

In cryptography, what does the Top notation mean? It resembles a capital T: T In particular, I saw it in the follwing context: $c = (c_1,c_2)^\top$ where $c_1$ and $c_2$ are homomorphic ciphertexts ...
3
votes
1answer
101 views

Time taken for a brute force attack on a key size of 64-bits

You can do $2^{30}$ encryptions per second and the key size is 64 bits. $2^{64}/2^{30}$ should give me the time taken for a brute force attack? What if you double the key size? How can I calculate ...
3
votes
0answers
62 views

How to attack polyalphabetic affine cipher with only ciphertext?

How to attack polyalphabetic affine cipher with only the ciphertext? A polyalphabetic affine cipher can be seen as the composition of an affine cipher ($p \mapsto c \equiv a \times p + b \pmod{26})$ ...
0
votes
2answers
75 views

What is necessary for generating an elliptic curve?

Let's say I want to generate my own elliptic curve with an order whose bit length is $n$ (specifically 2048, 4096, and/or 8192)? How would I do this? What needs to be done? What software can do this? ...
0
votes
0answers
10 views

Do eCryptfs encrypt same source files into same retulsing encrypted files?

Can I assume that for given eCryptfs mount, files with byte-by-byte same content will map into byte-by-byte same encrypted files in underlying filesystem (i.e. after umount) ? (i.e. if resulting ...
1
vote
0answers
29 views

WPA-PSK authentication without password [closed]

Suppose I have a service in which I allow users to share their WiFi connection. When sharing their connection, users provide their WPA PSK password to my service. Now if somebody wants to use this ...
0
votes
2answers
25 views

Is ssl_sign safe as it is using OPENSSL_PKCS1_PADDING

I've been hearing a lot of scare talk about PKCS1 padding attacks. Is PKCS1 v1.5 safe in signatures as it is practically transporting only message digest? I'm using it in one of my applications so ...
5
votes
1answer
61 views

Can RSA-PSS signing be made deterministic without loss of security?

Is it possible to make RSA-PSS signing deterministic without loss of security? Specifically, I would use Blake2b of the key and message to generate the salt.

15 30 50 per page