I'm more of a visual person, so a chart or table layout usually works best to help me "see".

I'm just trying to locate a resource that shows me where the various ciphers fall in relation to each other based on the various configurations they can be used.

Same for file hashing (using SHA-1 vs HMAC SHA-1, etc).

NOTE: As I cannot yet "comment" I am adding clarification here:

The challenge I am facing is that I am trying to appreciate the scope of what a single view of how the different ciphers compare to each other, but based on comments below I think I see why one does not exist (yet).

So I am trying to learn how best to compare and contrast the various ciphers to know which is best - for the sake of argument let's say for SFTP encryption for data in transit.

Maybe what I should be asking for is the process or method by which I should go about determining which cipher to use in any given situation.

Not trying to be difficult or vague, just a middle aged veteran trying to get better at understanding cyber as a new career is all (less than 3 years) and looking for ways to grock it. The text books haven't helped much and I find that usually someone on a forum can phrase it in such a way that I "get" it.

Thanks in advance.

  • $\begingroup$ And I just came a cross this on another post: en.wikipedia.org/wiki/… $\endgroup$ – Gabriel Landowski Jan 7 at 20:52
  • $\begingroup$ Which aspects of the ciphers are do you want to relate to? $\endgroup$ – SamG101 Jan 7 at 23:24
  • $\begingroup$ @GabrielLandowski: Why not google a little bit more? :) There is symmetric and asymmetric encryption. For symmetric there are block and stream ciphers. For block ciphers there are different modes of operation. For asymmetric you can consider e.g. RSA and ECC. For ECC different curve types. If you draw it, you will get a pretty big tree. And you what of their aspects do you want to compare: Performance, resources needed to brute-force, smth. else ? $\endgroup$ – mentallurg Jan 7 at 23:34
  • $\begingroup$ @mentallurg - I guess --^ is what I needed to understand to start with as I didn't really realize the scope of what it means to "compare & pick" encryption. As I mentioned in my edit/NOTE above I guess perhaps it would be better for me to start with understanding how to go about picking what is best (using SFTP as a use case?). $\endgroup$ – Gabriel Landowski Jan 8 at 19:10

Something like this (for AES)? If this is the kind of thing that you are looking for then I will expand it to include other ciphers, attributes, and hash algorithms.

Symmetric Ciphers | Mode | IV Needed | Authenticated |
       AES        | CBC  |    yes    |      no       |
       AES        | CTR  |    yes    |      no       |
       AES        | CFB  |    yes    |      no       |
       AES        | OFB  |    yes    |      no       |
       AES        | ECB  |    no     |      no       |
       AES        | CCM  |    yes    |      yes      |
       AES        | GCM  |    yes    |      yes      |
       AES        | XTS  |    yes    |      no       |
       AES        | OCB  |    yes    |      yes      |
| improve this answer | |
  • $\begingroup$ That is a too broad question and you cannot fill all. Actually you talked about block cipher mode of operation that applies not only AES. $\endgroup$ – kelalaka Jan 7 at 21:45
  • $\begingroup$ Yes true, I just didn't want to expand too much in case this isn't rly what OP wanted $\endgroup$ – SamG101 Jan 7 at 22:20
  • $\begingroup$ What you have started is helpful, so if you don't mind I would like to see more. $\endgroup$ – Gabriel Landowski Jan 8 at 19:11
  • $\begingroup$ No problem, I'll do more work on it over the next couple days $\endgroup$ – SamG101 Jan 8 at 19:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.