3,461 reputation
21331
bio website
location
age
visits member for 3 years
seen Jul 9 at 9:05

Jul
25
awarded  Nice Question
Jul
21
awarded  Nice Answer
Jul
15
awarded  Popular Question
Jul
12
awarded  Yearling
May
17
awarded  Guru
May
5
awarded  Nice Answer
Apr
24
awarded  Nice Answer
Feb
11
comment Counter Mode in Advanced Encryption Standard(AES) Algorithm
@Bulat CTR's not all that intuitive. As you say, the plain text of the block cipher primitive is in fact shared in this case (the IV+nonce). In the NIST article, you're looking for the recommendation to use $b/2$ where $b$ is the block size of the cipher - i.e. 128 for all AES variants. They do also recommend using full-block nonces - see Paulo's comments on those.
Feb
11
comment Counter Mode in Advanced Encryption Standard(AES) Algorithm
@Bulat well, it is quite often implemented that way as recommended by NIST (Appendix B.2) and no, it does not make the encryption 64-bit. There is still a 128, 192 or 256 bit key on which the security of the system depends.
Feb
4
awarded  Custodian
Feb
4
reviewed Excellent What exactly is a negligible (and non-negligible) function?
Feb
4
reviewed Excellent Blind quantum computing and fully homomorphic encryption
Feb
4
reviewed Satisfactory Deriving Keys for Symmetric Encryption and Authentication
Feb
4
reviewed Excellent Number of states in a LFSR
Feb
4
reviewed Satisfactory Future-Proof Versioning and Validation
Feb
4
reviewed Excellent FIPS 140 compliance for encrypted files
Feb
4
reviewed Excellent On-the-fly computation of AES Round Keys for decryption?
Feb
4
reviewed Excellent Does RSA-OEAP have integrity and authenticity properties?
Feb
4
reviewed Satisfactory A situation where security by obscurity might be the best solution - or am I wrong?
Feb
4
reviewed Satisfactory Two step encryption