All Questions

5 views

Finding $f^{-1}$ in the YASHE keygen algorithm

In the YASHE (Yet Another Somewhat Homomorphic Encryption) algorithm, the beggining of the key generation step specifies: Sample $\ f',g ← χ_{key}$ and let $\ f = [tf' + 1]_q$. If $\ f$ is ...
95 views

22 views

Incorrect answers to queries in Waters' IBE proof by Bellare and Ristenpart

In "Simulation without the artificial abort: Simplified proof and improved concrete security for Waters' IBE scheme", Bellare and Ristenpart present a new proof for Waters' IBE scheme that does not ...
38 views

Secure network protocol that can detect and adapt to attacks?

Is there any secure network protocol that can detect and adapt to attacks? For example: it would detect how hacker hacked it and then it can learn by itself and adjust itself and do encrypted ...
9 views

how write AES Inverse cipher key of 256 bit in verilog and inv mix column code in verilog .can any one have the verilog code [on hold]

how write AES inverse cipher key of 256 bit in VERILOG and inverse mix column code in VERILOG .can any one have the VERILOG code . can any body provide the VERILOG code
58 views

Under which conditions would it be OK to use “H(pass||data)”?

I understand that the main motivation for HMAC is extension attacks. If data always has content-length either implicit in the app or even explicitly put into the hash, I get the impression that HMAC ...
75 views

Encrypting big numbers into small ones?

I'm new to cryptography and I am trying to figure out an equation that convert any big number to a smaller one and another one that reverse the operation to get the same big number again! The problem ...
22 views

Does the Blowfish cipher work with OFB mode?

I'm trying to implement the Blowfish cipher in Output Feedback mode. OFB mode has two operations, XOR and the block cipher. XOR inputs two blocks of the same length and outputs one block of the ...
37 views

Is XORing a random stream of bytes a secure way to obscure a file?

Long ago I created a very simple program that used the C library's rand method to generate bytes to XOR with the bytes of a file. This was a reversible (just run it through again) method to make a ...
46 views

Is anyone using Half-Bit encryption? What is it used for now?

Long ago I learned about an encryption scheme which uses a random mask of bits which were "half on". I don't recall all the details, but basically, if a mask bit was a one, the input bit was passed ...
21 views

AES/GCM Encrypt or decrypt from both Java and .NET [on hold]

New to encryption... I am trying to match an encrypt/decrypt routine created in Java with a .NET but I am getting a "The computed authentication tag did not match the input authentication tag" error ...
47 views

Is “6 bit packed ASCII” an effective encoding to obscure text data?

I wrote a routine for a former employer that took the low six bits of ASCII text and "compressed" by cramming the bits together, so that 4 bytes reduced to 3. This had the advantage of automatically ...
53 views

How can I resolve this basic MAC paradox I’m stumbling upon in my proof?

Suppose $S: K \times M \to T$ is a secure MAC. ($K$ = key space, $M$ = message space, $T = \{0,1\}^n$ = tag space.) $S$ being secure means that no matter what messages $m_1,...,m_q$ we throw at $S$ ...
40 views

Are there some well-known crypto APIs that leak information?

Are there any well-known crypto APIs or libraries that leak or used to leak information (it can be the key or anything else)?
77 views

SAT-Based Public Key Cryptosystem

I am researching post quantum cryptography and I've stumbled upon this article which presents a PKC with an np-complete (SAT) trapdoor. I was wondering if someone could help me understand the way the ...
28 views

Calculating 3DES Key Check Value (KCV)

I am trying to verify a Triple DES Key Component generated by PC Crypto. The key portion is: E6F1081FEA4C402CC192B65DE367EC3E and the KCV value that should be ...
89 views

Is this an effective obfuscation technique?

Long ago I created a simple program which obfuscated a file by taking the first byte, then XORing it with the second, taking the (original) 2nd byte and X-ORing with the 3rd, etc, down the line. The ...
58 views

Order-Preserving Encryption (OPE) and leakage

I recently came across OPE and Order-Revealing Encryption (ORE), but I didn't exactly got the idea why they are important. What's exactly important about them? Are they actually used in practice? My ...
103 views

Can a hash have more than one input?

From a definition stand point, can a hashing algorithm have more than one input, ex: $H(m_1, m_2, m_3)$? If not why are algorithms like bcrypt, scrypt and pbkdf2 referred to as password hashing ...
3k views

Can Shannon's entropy be used to determine if a file is encrypted?

If we have to determine a file is encrypted or not, can we use Shannon's entropy algorithm on the file? As discussed here, the entropy (in bits per byte) being closer to 0 is considered as more ...
59 views

How to meter and limit number of files encrypted?

First my apologies if this isn't the right forum for this but here's my problem : I have a black box that takes an input file and produces an output file. I want to sell this black box to a customer ...
38 views

In which situation is HMAC mandatory rather than signature? [duplicate]

I’ve seen that the question has been asked already but this is still confusing to me. In a digital signature, Alice sends a message M and the ...
24 views

HSM RNG - Compliance to FIPS 186-2

If the RNG of a HSM is said to be compliant to FIPS 140-2 (approved DRBG - SP 800-90 CTR mode) does also imply that it is compliant to FIPS 186-2 ?
17 views

Homomorphic encryption implementation over circuits or assembly code [on hold]

I've looked at a few implementation of homomorphic encryption, such as HElib, but they only consider additions/multiplications and such. Is anyone aware of any implementation of homomorphic ...
9 views

Entropy of Hash function [duplicate]

How is the entropy of the output of hash functions are defined? More specifically I saw in the paper https://eprint.iacr.org/2013/383.pdf Table 3 page 24. The entropy of challenge is mentioned which ...
32 views

Proof for collision resistance on a block-based hash

I am designing an unkeyed hash based on the SIMON cipher. This is a follow up to “this” question. A quick summary: I have an ECC engine and the SIMON cipher in hardware, and it’s in an extremely ...
46 views

Encoding an element in $r=r'||h(r')$ way

We consider a finite field $\mathbb{F}_p$, where $p$ is a large prime e.g. 256-bit. We have $b$ a fixed element of the field. We encode it as $b'=b||h(b)$, where $h(.)$ is a cryptographic hash ...
42 views

How to tell if an audio stream is encrypted or corrupted? [on hold]

Is the following stream encrypted or corrupted? I was on a call and then this happened: http://vocaroo.com/i/s0PlF2s8ULAU
35 views

How we compute distance after lshashing? [on hold]

If we use an lsh function under l2 distance (hw,b(x)= ⌊ (wTx)/r ⌋ where w is a d-dimensional vector with entries chosen independently from a 2-stable distribution, r is a positive real number) or ...
23 views

Proof that two signatures are done with the same short bases

My question is regarding lattice based signatures. Each lattice can have multiple short (secret) bases. Is it possible to proof in zero knowledge that two signatures on a fixed lattice have been ...
18 views

What is the exact algorithm and functions of the 4 way handshake?

I have to make a detailed diagram of the 4 way handshake and formulas for its functions so I need to know the exact process behind it. Like precisely what functions are used in it? I have been trying ...
193 views

How should I read these three-dimensional (pseudo)random-generated numbers representations?

Visiting this site: http://lcamtuf.coredump.cx/oldtcp/tcpseq.html#phase I found graphical representations of random-generated sequence numbers, but I can't figure out how to interprete the plots. ...
38 views

A5/2: Ciphertext Only Attack

A5/2 could be attacked with cipher-text only, using the Error Correction Code, in order to retrieve the session key. For the purpose of simplicity suppose that the error correction code copy the ...
3k views

Which public key cryptosystems are not based on number theory?

Are there any public key cryptographic systems whose hardness assumptions don't involve number theoretic problems?
47 views

any post-shannon symmetric ciphers?

As far as I understand block ciphers use only simple operations to ensure good enough confusion and diffusion levels. meaning there is no math in it. "breaking a good cipher should require as much ...