# All Questions

4 views

### AES attacks on short key

Hye, I am new to encryption, and i am studying AES encryption. Is there knowns attacks on aes thats uses 16 bit key? assuming the data can be 95MB size, and that i can request the same data over and ...
3 views

### Charm-Crypto: Got <terminated, exit value: 139> when trying to serialize object

I'm implementing a Dabe scheme with Charm and I need to share the public parameters over multiple entities. I'm trying to serialize the charm object containing these parameters using objectToBytes() ...
20 views

### Why do cryptographic hashing and symmetric encryption use different functions?

Something about encryption and hashing has always bothered me. Given a cryptographically secure hash function $H$, I can produce an arbitrarily long key from any seed $s$ by recursively applying $H$ ...
8 views

### How to decrypt Salesforce encrypted attachment in C#?

I have asked this question on Stackoverflow, but this may be a better place for it: I have a test Apex class in Salesforce that encrypts an email attachment. The received attachment is then uploaded ...
3 views

### programming cod for Acorn cipher

I'm doing a research on Acorn cipher and i need the code programming for it. If you can please help me! thank's
40 views

### Is there any symmetric key cipher (block or stream cipher) providing partial decryption?

symmetric key cipher (block or stream cipher) providing partial decryption of data at some points. Although the entire data has not been decrypted, the data decrypted to that specific point should be ...
3 views

### Validating subset of a password

Is anyone aware of an algorithm/method that allows me to validate just a few letters (or other characters) from a password. For example, the application asks for the 2nd, 3rd, 6th and 9th letters from ...
12 views

### Implement ECDSA signature verification in C++

The catch is the parameters for the verification are in the Java side in Android. I need to use the OpenSSL library for this. I have no idea on how to pass the params to the jni or how to convert them ...
23 views

I have hard time finding introductory book talking about details of secure multiple party computation. Is there any recommendations? Thanks for the help. Hope this is not off topic.
4k views

### If I have the unencrypted text and the encrypted text, can I calculate the key?

If I have the unencrypted text and the encrypted text, can I calculate the key? It seems logical based on my limited knowledge of encryption that I should be able to... but it also seems like too ...
200 views
+150

### Algorithm for Boneh and Durfee attack on RSA

I am trying to understand various attacks on RSA and I believe that they only way to fully understand the algorithm is to implement it. I am trying to implement the code in this paper (pdf) (Private ...
47 views

### SipHash's (non-)collision resistance

I'm very new to cryptography, and I need help understanding the security claims made in Aumasson and Bernstein's paper on the SipHash. In particular, I'm trying to understand the following statement ...
10k views

### The modulus of RSA public key

I am studying the RSA cryptosystem. The public key consists of $(n, e)$, the modulus (product of two large primes), and the encryption exponent. I want to separate the modulus $n$ and exponent $e$. A ...
33 views

### Decrypting RSA message

I need help with a practice problem for an upcoming test. I've learned the answer to the problem is "well done", but don't know how to get there. Any help is greatly appreciated. Suppose that the ...
19 views

### In Fortuna, can I use ChaCha20 instead of a block cipher and Blake2b instead of iterated SHA256?

In the Fortuna CSPRNG, can I use ChaCha20 instead of a block cipher and Blake2b instead of double SHA256, and still retain security? My hypothesis is "yes" because: The block cipher's only use is ...
114 views

### Reverse output of general Fibonacci LFSR

Suppose we have some Fibonacci LFSR, and it outputs some sequence. How to change starting LFSR so, that it outputs exactly same sequence, but in reverse order?
28 views

### What kind of analysis can I perform on my implementation of Salsa20 and Rabbit ciphers?

I've implemented both the Salsa20 and Rabbit ciphers in C#. My implementation is for academic purposes and I've tested both of them against the test vectors. I implemented a system that encrypts a ...
113 views

### Where is the mistake in my RSA by-hand calculation?

Like several previous askers, I seem to have made a mistake in my RSA calculation, but despite going back over it three times, I cannot spot it. I picked 1000003 and 6000011 as my primes, ...
16 views

### Encrypting using “Cryptography.HMACSHA1”, how to decrypt (VBA)

I have an encryption routine that works very well in VBA. But now I need to program the decryption routine, and I'm stuck. For encryption I'm using HMACSHA1 and transferring the encrypted byte to base ...
80 views

### Should RSA primes p and q differ in length by “a few digits”?

When generating RSA keys in the original RSA paper it is stated: to gain additional protection against sophisticated factoring algorithms, p and q should differ in length by a few digits Why is ...
30 views

### Encryption program help

First I must say that I don't know which coding language is best for creating an encryption program. But I have an idea for an open source encryption program that uses the program itself to encrypt or ...
19 views

### Why ssh-gen makes difference between PEM and PKCS8?

Correct me if I am wrong, but PKCS8 is format to store private key info. It could be binary-enoded (DER) or Base64 encoded ...
24 views

### How to use the non adjacent form (NAF) algorithm to implement scalar multiplication? [on hold]

I'm confused by the following NAF-algorithm. How could I possibly use it to implement scalar multiplication for elliptic curves? ...
72 views

### Is it possible to perform an MPC protocol to compute a product in a polynomial ring?

I hope not to be asking much, but I have N parties, each one holding a polynomial in with 0-1 coefficients and fixed degree $n-1$. I was wandering if it is possible (I mean feasible) to compute the ...
20 views

### Symmetric Cipher Providing full and partial decryption

Let us have Video Data $D$ and we want to encrypt the data in such a way that upon decryption we have multiple decryption keys which will give us full or either partial decryption depending on the ...
787 views

### Proving knowledge of a preimage of a hash without disclosing it?

We consider a public hash function $H$, assumed collision-resistant and preimage-resistant (for both first and second preimage), similar in construction to SHA-1 or SHA-256. Alice discloses a value ...
47 views

### How to generate many passwords from one passphrase, so that knowledge of one password does not compromise the others?

The limitations are: it should be a function. passphrase is so weak, that if hash of it is known (or big part of hash), then it can be brute forced. I want to get N passwords from one passphrase. ...
1k views

### Theoretical pi-based stream cipher

Let's pretend that all digits of pi are known and arbitrarily long sequences of digits are trivial to get. Further, some mathematician proves that there are no patterns in pi. We could create a stream ...
53 views

### Block cipher mode of operation with beyond-birthday-bound security

I am looking for block cipher modes of operation that are secure even when the number of blocks encrypted exceeds the birthday bound.
19 views

### Does a password that's cracked someone's account increase the chances of cracking someone else's account?

For every find in password that cracks someone's account, does that particular password have a higher probability of cracking someone else's account more than a brute force dictionary choice? How ...
101 views

### Same 64-bit preimage resistance security for SipHash and SHA-512/64?

If I have to chose a 64 bit preimage resistant hash function; will there be any difference in security between SipHash and SHA-512/64 (SHA-512 truncated to 64 bits)? How long will it take an ...
111 views

### Generating random vector for Full Homomorphic Cryptography

The site below explains that part of doing homomorphic encryption, you need to generate a vector of random numbers that have the property that its dot product against a randomly generated bit vector ...
35 views

### Hash function with good performance on extremely short messages

Are there randomized almost universal hashes that are fast for extremely short messages (usually <10 bytes)? Edit: This is for hash tables, so it only needs to be hard enough to break to make the ...
126 views

### How does SSL work on the browser

I recently bought an SSL certificate from a website and was able to make it work on my Apache server. As far as I know, it uses asymmetric keys and the private key is stored on the server while the ...
34 views

### What is the branch number of this matrix?

We have the following matrix: $$\begin{pmatrix}0&1&1&1\\ 1&0&1&1\\ 1&1&0&1\\ 1&1&1&0\end{pmatrix}$$ What is the branch number? Is this a MDS marix?
37 views

### 2-round key-exchange protocol converted to CPA-secure public-key encryption scheme [on hold]

Show that any 2-round key-exchange protocol (that is, where each party sends a single message) can be converted into a CPA-secure public-key encryption scheme.
64 views

### Multilinear Pairing in Cryptography

I want to create 2 Bilinear Pairing $e_1$,$e_2$ such that $$e_1:G_0 \times G_0 \rightarrow G_1$$ $$e_2:G_1 \times G_1 \rightarrow G_T$$ and use this to encrypt a message $M$ in the form M ...
14 views

### Securely register a client in server using AES an RSA

I've designed the following protocol to send the client's public key to the server. Initially, the client knows server's public key, but the server does not know the client's public key. client ...
24 views

### How to use the hardcoded server's public key to register a client application?

I'm designing the security for a smartphone app that can be used to make car reservations. Clients have to register them with their driver's licence through the application and can then book a car. ...
15 views

### how scalar multiplication using periodic sequence in ECC be created?

if it is prepare in java then what steps would be taken? how NIST recommended binary curve be used in the scalar multiple algorithm
27 views

### Security timestamp [on hold]

I want to prove the security of a cryptosystem, that makes use of trusted timestamps. Unfortunatelly I can't find any information about how a secure timestamp is defined (I was looking for sth like ...
245 views

### Symmetric mutual authentication with client using a derived secret

I'm attempting to find a client/server authentication protocol that allows the client and server to authenticate each other when the client doesn't know the server secret but does have a sensitive key ...
45 views

36 views

### How is the base64 encoded signature in Craig Wright's proof constructed?

Mr. Craig S. Wright might be Satoshi Nakamoto - the inventor of bitcoin. He is currently proving the case. But how is the base64 encoded proof, that is published by himself on his blog post ...
52 views

### tls 1.2 finished message stucture

I am implementing TLS 1.2 and using ECDHE_RSA_AES_128_GCM_SHA256 cipher suit. According to RFC 5246 finished messages have {verify_data[verify_data_length]} and verify_data = PRF(master_secret, ...
3k views

### Examples of modern, widely used ciphers that suddenly fell?

RC4 and GOST are two major ciphers (defined as being widely used to encrypt large amounts of data) that fell to cryptanalysis (relatively) suddenly. The first becoming totally broken and the second ...