Linked Questions

9 votes
1 answer
2k views

What is a related key?

We talk of related keys and related key attacks, but what is a 'related key'? So in three related parts:- How can one key be related to another key? Is there a metric describing the degree of ...
Paul Uszak's user avatar
  • 15.6k
7 votes
2 answers
2k views

What is the importance of Rcon in Rjindael's key expansion from a security prespective?

I do not see why the Rcon function is important, it looks like a waste of cycles. $$\operatorname{Rcon}(i) = 2^{i-1} \bmod p(x)$$ is in $\operatorname{GF}(2^8)$, ...
Error's user avatar
  • 173
6 votes
2 answers
450 views

Do test vectors ensure a cipher is free of backdoors?

If a cipher implementation passes unit tests using test vectors from some trusted source (these for AES, for example), then can we say that it is fully conforming to the specification, and must have ...
user avatar
7 votes
3 answers
2k views

Post Quantum Symmetric Cryptography

So I am looking for the most secure method of symmetric key cryptography for long term messaging use between two users. I have heard that most symmetric key algorithms are not absolutely compromised ...
Nick's user avatar
  • 106
4 votes
2 answers
1k views

Can a 1 byte difference in AES 128 bit keys make huge difference in output?

If we take some randomly generated key of AES-128 and we change any random 1 byte of that 16 byte key, will this make huge difference in the AES cipher text generated over same input string? Does ...
rijndael's user avatar
  • 471
6 votes
1 answer
2k views

Choice between AES-128 and AES-256 for password protection in MS Office

Why are we still using the default of AES-128 when password protecting a Microsoft Word document. My answer is and always has been - because its good enough and MS don't recommend changing to AES-256. ...
RichS's user avatar
  • 61
2 votes
1 answer
3k views

How often do I need to rotate AES 256 keys

I'm trying to design a protocol for a resource constrained environment. The device has to communicate with a server through an insecure node. My plan is to use AES 256 end to end for all ...
user2328113's user avatar
3 votes
2 answers
3k views

Consider the use of double encryption applied to the AES algorithm with two 128-bit keys

Actual Question below. Consider the use of double encryption applied to the AES algorithm with two 128-bit keys. How much storage and computation would be required to execute a meet-in-the-middle ...
Aizat Marzuki's user avatar
3 votes
2 answers
1k views

Security of AES in CTR mode with fixed nonce (but different key)

If I am using AES in CTR mode and use a unique key every time but the same nonce, is this secure? If so, does it make a difference if the nonce is public?
Sherif Awad's user avatar
1 vote
2 answers
608 views

How do Hash functions work under the hood? [closed]

Using and benefiting from hash functions on a daily basis, I keep wondering how hash functions actually work down in their core. Most of the available resources I found, only explained hash functions ...
Daniel Hitzel's user avatar
5 votes
1 answer
202 views

Is there any correlation in between two AES with a key differ only by one bit? (ECB mode)

Given two AES (128bit, ECB mode) with almost equal keys $k_1,k_2$: 127 of the 128 key bits are equal. Is there any correlation in between the ciphers they build? $$AES_1(m_i) = c_i$$ $$AES_2(m_i) = ...
J. Doe's user avatar
  • 453
3 votes
1 answer
225 views

Are two keys derived from the same password vulnerable to a related key attack?

Background I am currently writing a password manager application. As usual, the passwords are put in a file encrypted using a user-entered password. I'm using the NaCl library but actually it's not ...
Zaphod's user avatar
  • 55
0 votes
1 answer
107 views

Is a new block cipher harder to design than a new hash?

I realise that cipher and hash primitives are somewhat different. But they share common requirements like attack resistance amongst others. And I realise that attacks /vulnerabilities are ...
Paul Uszak's user avatar
  • 15.6k