Linked Questions

23
votes
2answers
22k views

How does a chosen ciphertext attack work, with a simple example?

Can someone please explain - using a simple example - how a chosen ciphertext attack works?
13
votes
3answers
5k views

How do I detect a failed AES-256 decryption programmatically?

I have implemented a simple encryption/decryption program based on AES-256 in CBC mode1. Actually, it is more precise to describe it as a compression+encryption / decryption+decompression program. ...
6
votes
4answers
3k views

One Time Pads and “Bit Flip” Attacks

One Time Pads and Vulnerability to "Bit-Flip" Attacks: I've seen it in this group, and apparently there are a (small) number of voices on the 'net opining that those relying on OTP are essentially "...
17
votes
1answer
2k views

Why choose an authenticated encryption mode instead of a separate MAC?

What are cryptographic reasons to choose an authenticated-encryption mode of operation (such as GCM) over a traditional encryption mode plus an independent MAC, or vice versa? Assume there is no ...
6
votes
1answer
2k views

Why is asymmetric encryption IND-CPA?

According to Wikipedia, the IND-CPA game is: The challenger generates a key pair PK, SK based on some security parameter k (e.g., a key size in bits), and publishes PK to the adversary. The ...
2
votes
1answer
1k views

SHA256-based stream cipher

Can anyone comment if the stream cipher described here is safe? The author claims it to be unbreakable, but does not provide any evidence or proof to support this. For completeness, I have reproduced ...
3
votes
2answers
470 views

How to provide integrity even though using Authenticated Encryption?

Gilles made the following comment here: using authenticated encryption does not guarantee integrity, only authenticity. You can't detect a rollback. From what I gathered: Authenticated Encryption ...
2
votes
1answer
2k views

Is it possible to split a large AES encrypted string and decrypt the parts one by one?

Due to some platform restrictions our decryption algorithm can only handle up to 1 million bytes. The string we receive is larger, having been generated by AES in cipher block chaining (CBC) mode, ...
4
votes
3answers
686 views

Reusing IV in AES for encrypting file

Everyone says that you shouldn't use the same IV and Key. Is it safe to use the same IV and Key on only one file. EDIT: I will be using CBC or CFB encryption modes so the IV will be updated based on ...
3
votes
2answers
459 views

When, where, and how to use HMAC

This question may seem like a duplicate of some others, namely this one, but even though that question asked when and how to use HMAC, the answers only addressed what HMAC was and why/how it worked. ...
0
votes
3answers
542 views

Can data over a very low bandwidth channel still be encrypted?

If you have a very low bandwidth channel, can encryption still be used? Another way of putting this might be, does encrypting well increase the size of the data significantly? Are there good ...
2
votes
2answers
348 views

Is there a point using GCM block chiper with Authenticated DH?

I'm delivering shared secret with DH exchange, using a static key for signing and an ephemeral for session, so is there a point using GCM for encrypting the data, or is a simple CBC/CTR block cipher ...
1
vote
3answers
238 views

Generating OTP using Digital Dead Drop

I've had a thought and I'm wondering if this would be a useful way to devise and distribute a one-time pad. It relies on a digital dead drop and a hash function. The digital dead drop could take a ...
-4
votes
1answer
177 views

at rest encrypton question from someone who knows nothing

this forum is way above me and the members here are far, far smarter than I am, so this probaby isn't the place to ask such a simple question, but whatever. All I wanted to ask is for at rest ...
-2
votes
2answers
82 views

In cryptography is there such as thing as disguising unencrypted text?

Just wondered: I currently have TrueCrypt on my system (I am aware that there are various doubts about its penetrability, and that it is no longer under development). TC "volumes" obviously consist ...

15 30 50 per page