All Questions
-5
votes
1answer
39 views
AES ENCRYPTION ALGORITHM [closed]
What is the amount of decrease in the probability of decrypting a data encrypted using an AES algorithm? (That is by introducing each round out of ten whole rounds, how the probability of decryption ...
0
votes
1answer
158 views
What is the probability of breaking the AES algorithm?
I am doing a project which requires the encryption to be done using AES. Is it really possible (technically) to crack AES?
If yes, please tell me:
What is the probability of breaking AES?
How ...
3
votes
1answer
76 views
How to use HMAC for large ciphertexts over TLS
HMAC used to secure chosen cipher-text attacks. if we are encrypting a large file (video) and sending it over TLS for decryption, how server can check MAC for ciphertext when we didn't sent whole of ...
1
vote
1answer
94 views
which asymmetric cipher provide highest performance?
to get highest performance Which asymmetric cipher provide fastest encryption/decryption ? ECC or DH ? what key size is recommended today ?
6
votes
1answer
129 views
Solving hard problems in $\mathbb Z_{p}^{*}$ when $\mathbb p$ is close to $\mathbb 2^{n}$
Suppose, for some security parameter $n$ you choose a prime $p$ such that $p = 2^n+c$ for some relatively small $|c| < 2^m << 2^n$. I have seen such primes being called Pseudo-Mersenne Primes ...
3
votes
6answers
306 views
Where can I begin to study the math behind modern cryptography?
I've been studying (more like breathing and eating) crypto for almost a year now, implementing algorithms, reading books, studying code, etc. The deeper I go in, the more I realize there is; I feel ...
0
votes
0answers
80 views
Secure modulus length for Diffie-Hellman
What is secure modulus length for modular exponentiation so that finding discrete log is computationaly impossible?
0
votes
1answer
36 views
reduces the coefficients of a modulo 3 on NTRU
i'm still don't understand about 'reduces the coefficients of a modulo 3' on NTRU tutorial
$a = f*e = 3 - 7X - 10X^2 - 11X^3 + 10X^4 + 7X^5 + 6X^6 + 7X^7 + 5X^8 - 3X^9 -7X^{10} \pmod{32}.$
Note ...
0
votes
1answer
78 views
In which disciplinary kind can Cryptography be put?
Is it a multidisciplinary? an interdisciplinary? a cross-disciplinary? or a trans-disciplinary?
what are the basis put to describe each kind?
I mean how can we infer by which disciplinary field we can ...
3
votes
1answer
77 views
Perfectly hiding / binding commitment scheme
Let's say Alice and Bob are playing a game where Bob is trying to guess a number Alice has chosen.
Alice chooses a key $K$ and a number $N$ at random and performs $C=Commit(K, N)$ where $Commit(K, ...
2
votes
0answers
65 views
State of the art in zero knowledge proof compilers?
What is the current state of the art zero knowledge proof compiler ? I need one that can minimally handle double exponentiation by a known value E.g.
$$Pok\{(\alpha):h=g^{\alpha^b}\} $$
where b, ...
4
votes
4answers
197 views
What is the difference between a hash and a permutation?
As defined by Wikipedia a hash function is
[...] any algorithm or subroutine that maps large data sets of variable length to smaller data sets of a fixed length. For example, a person's name, ...
2
votes
1answer
116 views
How to compute the dot product on encrypted values?
Is there a practical homomorphic encryption scheme that can give reasonable execution time results in computing a dot product:
$$a_1*b_1 + a_2*b_2 +a_3*b_3 +\ldots+ a_n*b_n$$
I imagine the scheme will ...
1
vote
1answer
111 views
How to calculate y value from ((y*y) mod prime) efficiently
i am working ECC-224 bit. can any one tell me, how to calculate y value from ((y*y) mod prime) efficiently for large bit numbers.
4
votes
4answers
197 views
Could a very long password theoretically eliminate the need for a slow hash?
Before I provide details, I want to clarify that I am not looking to implement this practically, but I'm only asking to get a better understanding.
The way I currently understand it, we use slow ...
2
votes
1answer
107 views
Cracking an RSA with no padding and very small e
I have a project wherein i have to crack a given cipher text encrypted using RSA and have been given N and e. Can someone suggest an RSA attack using a very small exponent e(here e=3) and no padding?
0
votes
1answer
71 views
Encrypting and Decrypting a 19-digits long BigInteger
How can I take a maximum 19-digits long BigInteger and encrypt it with the following rules:
The result must be based on digits and lower-case English letters ...
-1
votes
2answers
88 views
How does the rand() function in C work? [closed]
I want to know how rand() works (even when I don't provide any seed how it produces PRNs?) thanks!
0
votes
1answer
92 views
Sensible usecase for restricting special characters in passwords? [closed]
Please See Why Not Allow Special Characters In a Password on Security.
Several websites I've come across limit the allowed special characters for a password. My thought was, it should all be ...
0
votes
2answers
214 views
Even passwords are vulnerable to hash collision attacks?
As stated in this page large documents hashed using md5 maybe vulnerable to collision attacks. My question is even passwords of 6-30 character are vulnerable to such hash collision attacks? If yes, is ...
1
vote
2answers
124 views
Security of Deterministic Encryption Scheme
A deterministic encryption scheme is a cryptosystem which always produces the same ciphertext for a given plaintext and key, even over separate executions of the encryption algorithm.
Although we ...
6
votes
1answer
156 views
How would one crack a weak but unknown encryption protocol?
I asked a question on security.stackexchange, but was told it would be a better fit here:
http://security.stackexchange.com/questions/32779/how-would-one-crack-a-weak-but-unknown-encryption-protocol
...
1
vote
1answer
86 views
Brute forcing an HMAC
Given current technology such as GPUs and GPU cracking software I was wondering if anyone has an idea on how long it would take to brute force the key used to derive an HMAC?
2
votes
0answers
21 views
Encryption with Deduplication [duplicate]
Suppose I have a file server running ZFS with file deduplication enabled, and I have two users that are sharing files: Alice and Carol. If Alice uploads huge_file.tgz to her www/ directory, and Carol ...
-5
votes
1answer
33 views
decrypting unreadable string [closed]
Does anyone recognise this type of encryption? These are phone numbers consisting of 10 digits and starting with 0 but the encrypted text width is not 10 and does not start with the same character.
1
vote
1answer
33 views
Selecting a large NUMS Safe prime
Suppose I want to use the following simple hash function.
For a mesage $m$, take some public $a$ and prime $p$ and raise $a^m \bmod p$ (never mind the computational expense of this operation).
This ...
0
votes
2answers
91 views
Key Exchange and anonymity issue
If Alice (sender) sends a private message embedded with public key of the Bob(recipient) through onion network, so in this key exchange, does Bob remains anonymous to Alice as Alice knows about the ...
0
votes
1answer
54 views
Efficient algorithm for remainder calculation over prime field for ECC implementation?
I am working on 224-bit elliptic curve cryptography. In this 224-bit * 224-bit multiplication results 448-bit output. I am reducing 448-bit into prime field range( prime number $2^{224}-2^{96}+1$) ...
1
vote
2answers
112 views
How to verify a number encrypted with an unknown key
Are there any crypto-constructions to do the following kind of "zero-knowledge proof":
Alice encrypts a set of numbers using some cryptosystem and a secret key (e.g. Paillier crypto-system).
Bob ...
1
vote
1answer
92 views
How large should a Diffie-Hellman p be if the messages are encrypted?
How large should the prime $p$ and generator $g$ values be in a Diffie-Hellman handshake if the messages are encrypted.
If the key that encrypted the Diffie-Hellman messages becomes compromised, ...
0
votes
1answer
46 views
Solving congruences using PARI
I'm having trouble finding info in the docs about how to solve a system of congruences. The closest I can find is 'matsolvemod' in here: ...
1
vote
1answer
55 views
What is total key space in transposition algorithms
How we can measure key space in transposition algorithms? Should we specify the method, like rail fence ?
3
votes
3answers
232 views
Export from US of crypto software with key-size > 56 bits still needs permission?
Elsewhere someone stated that he couldn't publish his crypto software on the Internet, because US Export Regulations require approval, if the key size is greater than 56 bits. I know that several ...
2
votes
3answers
80 views
How comparable is OFB to a one-time pad?
This is a rather trivial question, I just want to see if I get the concept right.
In OFB you generate a pseudorandom stream based on some nonce, and you XOR that with the message to get the ...
3
votes
1answer
117 views
Understanding a Blowfish cryptanalysis
I'm reading a cryptanalysis on Blowfish, and I've come across something that I don't quite get. Let's denote
$$\delta = a \oplus a'$$
where a and a' are bytes that cause a collision in some S-box ...
4
votes
1answer
102 views
Does Linear Cramer-Shoup have pseudo-random ciphertexts?
"Linear Cramer-Shoup" is defined on pages 4 and 5 of $\:$ eprint.iacr.org/2007/074.pdf .
Are the ciphertexts in Linear Cramer-Shoup computationally indistinguishable from uniform
under a ...
2
votes
1answer
187 views
Low Public Exponent Attack for RSA
I'm having trouble understanding the algorithm for finding the original message $m$, when there is a small public exponent. Here is the example I'm trying to follow (you can also read it in the 'Low ...
2
votes
1answer
212 views
Is AES-256 a post-quantum secure cipher or not?
We know Grover's algorithm speedup brute-force attacks two time faster in block ciphers (e.g brute-forcing 128 bit keys take $2^{64}$ operations not $2^{128}$).
That explains why we are using 256 bit ...
3
votes
1answer
91 views
How to use GCM mode and associated-data properly
I'm currently migrating a project to use the bouncy castle GCM mode. I understand that using an authenticated mode removes the need for a HMAC, however I want to be sure that I'm using this mode ...
1
vote
1answer
60 views
Proof of the standard pseudorandom generator + XOR encryption scheme in Goldreich
Reading Goldreich's Foundations of Cryptography II, I found this proof for the security of the common pseudorandom generator + XOR encryption scheme (Proposition 5.2.12 in the book):
Assume you have ...
0
votes
2answers
104 views
Strong encryption done by hand [duplicate]
One of the distinguishing features of a good encryption algorithm, is that it is easy to encrypt, and hard to crack. Are there any that are easy enough for average folk to remember, and calculate by ...
3
votes
1answer
129 views
What are the constraints for an IV using AES in CBC mode?
I'm designing a protocol for use into a VPN software.
The VPN frames are encapsulated into AES-256 CBC encrypted frames. I understand that IVs must be uniquely used for each message encrypted with ...
0
votes
1answer
143 views
Anonymity in end to end encryption
Considering a scenario of anonymous data transfer between seller and buyer using proxies. If we consider that there are three proxies that are being selected by buyer to obtain data from different ...
3
votes
1answer
90 views
When confusion is applied during encryption?
I know confusion is used in cryptography to make it more difficult to identify any
relationship between the ciphertext and the symmetric key. I want to know when the confusion is applied during ...
3
votes
1answer
104 views
BCrypt vs Key Stretching MD5
Ars technica posted an article about the latest in cyber warfare from the stuxnet crew.
They key stretched MD5 by iterating it 10,000 times. It seems to be effective at handicapping HashCat's gpu ...
1
vote
4answers
104 views
How to perform Multiplicative Inverse Modulo in IDEA
How to perform the Multiplicative Inverse Modulo in International Data Encryption Algorithm?
I cannot understand on how to perform it...
ex. I have a value of "cf80" and the value that is appearing ...
3
votes
1answer
79 views
Key collision in scrypt and hkdf
I am developing a mostly-offline authorization system that authorizes a user using an deterministically generated AuthKey derived from a MasterKey derived from a high-entropy chunk of data (128 bits) ...
2
votes
1answer
107 views
DLP based crypto systems with multiple independent generators
One example of a DLP based crypto system (or rather DDH based crypto system) where the public key parameters include two independent generators of the subgroup, is Cramer Shoup. Since the security ...
1
vote
0answers
34 views
Can a LIRA system work with cjdns or other decentralized meshnets?
LIRA (Lightweight Incentivized Routing for Anonymity) is a scheme to incentivize participants in Tor to contribute resources, in particular bandwidth.
The paper talks about it being used for Tor. Can ...
0
votes
0answers
54 views
What is the significance of i^Q mod P = 1 and are there any special properties to be aware of?
I'm studying UProve, and one of the fundamental components of this technology is based upon the relationship between
i^Q mod P = 1
Lacking a specific name I can call this mathematical ...
