# All Questions

14 views

### Terminology - hashing algorithm

From a definition stand point, can a hashing algorithm have more than one input, ex: hash(m1, m2, m3)? If not why algorithms like bcrypt, scrypt and pbkdf2 are referred to as password hashing ...
28 views

### Can Shannon's entropy be used to determine if a file is encrypted?

If we have to determine a file is encrypted or not, can we use Shannon's entropy algorithm on the file? As discussed here, the entropy (in bits per byte) being closer to 0 is considered as more ...
18 views

### How to meter and limit number of files encrypted?

First my apologies if this isn't the right forum for this but here's my problem : I have a black box that takes an input file and produces an output file. I want to sell this black box to a customer ...
18 views

### In which situation is HMAC mandatory rather than signature?

I’ve seen that the question has been asked already but this is still confusing to me. In a digital signature, Alice sends a message M and the ...
9 views

### HSM RNG - Compliance to FIPS 186-2

If the RNG of an HSM is said to be compliant to FIPS 140-2 (approved DRBG - SP 800-90 CTR mode) does also imply that it is compliant to FIPS 186-2 ? Thank you
11 views

### Homomorphic encryption implementation over circuits or assembly code [on hold]

I've looked at a few implementation of homomorphic encryption, such as HElib, but they only consider additions/multiplications and such. Is anyone aware of any implementation of homomorphic ...
7 views

### Entropy of Hash function [duplicate]

How is the entropy of the output of hash functions are defined? More specifically I saw in the paper https://eprint.iacr.org/2013/383.pdf Table 3 page 24. The entropy of challenge is mentioned which ...
24 views

### Proof for collision resistance on a block-based hash

I am designing an unkeyed hash based on the SIMON cipher. This is a follow up to “this” question. A quick summary: I have an ECC engine and the SIMON cipher in hardware, and it’s in an extremely ...
24 views

### Encoding an element in $r=r'||h(r')$ way

We consider a finite field $\mathbb{F}_p$, where $p$ is a large prime e.g. 256-bit. We have $b$ a fixed element of the field. We encode it as $b'=b||h(b)$, where $h(.)$ is a cryptographic hash ...
39 views

### How to tell if an audio stream is encrypted or corrupted? [on hold]

Is the following stream encrypted or corrupted? I was on a call and then this happened: http://vocaroo.com/i/s0PlF2s8ULAU
31 views

### How we compute distance after lshashing? [on hold]

If we use an lsh function under l2 distance (hw,b(x)= ⌊ (wTx)/r ⌋ where w is a d-dimensional vector with entries chosen independently from a 2-stable distribution, r is a positive real number) or ...
21 views

### Proof that two signatures are done with the same short bases

My question is regarding lattice based signatures. Each lattice can have multiple short (secret) bases. Is it possible to proof in zero knowledge that two signatures on a fixed lattice have been ...
17 views

### What is the exact algorithm and functions of the 4 way handshake?

I have to make a detailed diagram of the 4 way handshake and formulas for its functions so I need to know the exact process behind it. Like precisely what functions are used in it? I have been trying ...
176 views

### How should I read these three-dimensional (pseudo)random-generated numbers representations?

Visiting this site: http://lcamtuf.coredump.cx/oldtcp/tcpseq.html#phase I found graphical representations of random-generated sequence numbers, but I can't figure out how to interprete the plots. ...
32 views

### A5/2: Ciphertext Only Attack

A5/2 could be attacked with cipher-text only, using the Error Correction Code, in order to retrieve the session key. For the purpose of simplicity suppose that the error correction code copy the ...
2k views

### Which public key cryptosystems are not based on number theory?

Are there any public key cryptographic systems whose hardness assumptions don't involve number theoretic problems?
45 views

### any post-shannon symmetric ciphers?

As far as I understand block ciphers use only simple operations to ensure good enough confusion and diffusion levels. meaning there is no math in it. "breaking a good cipher should require as much ...
39 views

### Does changing the order of the steps within a round affect the security of AES?

I was trying to understand the internal structure of AES (Advanced Encryption Standard) Standard order of steps within a round: Substitute Bytes Shift Rows Mix Columns Add Round Key Substitute ...
44 views

### What do the last chunks of the output string of Scrypt contain?

When you use scrypt to hash a string, it will generate something like: ...
30 views

### Why is symmetric lightweight crypto only about block ciphers and not about stream ciphers?

Why is symmetric lightweight cryptography only about block ciphers and not about stream ciphers? AFAIK stream cipher implementations cost at least three times less than block cipher ones?
31 views

25 views

47 views

### How is a hash function that implements random oracle model collision resistance?

ROM is considered as collision resistance. Does ROM assume there is an infinite set of output, or assume the output set is always larger than the input set? Because by the pigeonhole principle, ROM is ...
159 views

### Prime factorization of 700 decimal digits number

I'm a newbie to encryption. If I create a number 'n' as a product of two prime numbers 'p' and 'q' with the following specifications: 'p' is a fully random prime with 300 decimal digits in length. 'q'...
30 views

### Getting the same two hash values for carved files I found

I am doing an independent study class for computer forensics, I have to carve the images I've been given. After using scalpel I get a .wav file and .asf file both files play the same songs, and they ...
9 views

### Fix timestamp of self signature on PGP public key [on hold]

I accidentally changed configuration of my pgp key while my system didn't have the correct clock. And I uploaded my key to key servers. Now every time I try to download my key from key servers or even ...
20 views

### What is bounded-retrieval model?

What is bounded-retrieval model in cryptography? How is it related (or apply) to leakage-resilient cryptography?
467 views

### Feistel-Network - why wire crossing?

In Feistel-Network, there would be a wire-crossing at the end (for the next round). Which insufficiency would occur, if the wire crossing would be omitted?
27 views

### Attacks from releasing decrypted CCM payload before verifying tag

CCM specifies (Section 1.7) that no plaintext data should be released before the MAC is verified. Why is this recommendation given and what attacks are possible against CCM if data is treated like a ...
40 views

### Attacking Scrypt Under Access Pattern Leakage

Could cache-timing channels (such as exist for certain block ciphers) somehow be made use of in order to extract memory-access pattern information if both the attacker and user are NOT in a shared ...
50 views

### How to use modes of operation in DES? [on hold]

How to use modes of operation in block cipher with Data Encryption Standard (DES) ? How the Feistel structure properties are achieved in DES when a mode of operation such as ECB is used?
39 views

### Efficiency of oblivious algorithms vs non-oblivious algorithms

Recently, plenty of researchers are looking at designing efficient data-oblivious algorithms. Roughly speaking, an algorithm is said to be data-oblivious if its data access patterns are independednt ...
37 views

### Are any of the practical implementations of ORAM being used in a real world system?

The concept of Oblivious RAM (ORAM) was first introduced by Oded Goldreich and Rafail Ostrovsky in 1996. However, in the past 5-10 years there has been a surge in the amount of research that looks ...
38 views

### How do I decipher a text using a repeating one-time pad?

I have an encrypted message that is 582 characters long. I know that: It is in hexadecimal It has been encrypted using a one time pad The pad's length is exactly 50 characters When the pad reaches ...