Linked Questions

2 votes
2 answers
105 views

Using the MAC to verify if Cipher Only attack has succeeded

I am working on an experiment to compare the efficiency of brute-force attacking block ciphers like AES and DES with reduced key sizes for different programming languages and library implementations. ...
Matt's user avatar
  • 21
1 vote
1 answer
121 views

Hash-Then-Encrypt or Encrypt-Then-Hash on Keyed Hash Functions

I have seen other answers here on Stack Exchange regarding MAC-Then-Encrypt vs. Encrypt-Then-MAC (and this article regarding MAC-Then-Encrypt padding oracle attacks on SSL) as well as generic Hash-...
Hero's user avatar
  • 11
0 votes
1 answer
98 views

Does sending encrypted hash inside message compromise security

This might sound like a naive question (And maybe it is (It's an early morning Saturday thought, so there might be some clarity of thought missing)). Suppose we havea protocol that sends messages as ...
Tresorb's user avatar
1 vote
1 answer
101 views

Disk encryption and advanced format

As far as I understand, the biggest problem of requesting authentication in disk encryption is that the plaintext and ciphertext are not having the same size -because of tag-. The XTS mode is already ...
NB_1907's user avatar
  • 640
3 votes
1 answer
474 views

Digital signature and salt

I'm wondering whether is of any use to add salt when computing a signature of a piece of data. I looked around but didn't find an answer to this, although there's a very similar question: Why hash or ...
Juraj Martinka's user avatar
3 votes
2 answers
489 views

Are the following ciphersuites vulnerable? if so, what are the vulnerabilities?

Following ciphersuites found to be weak in Qualys(https://www.ssllabs.com/ssltest/analyze.html) tool: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH x25519 (eq. 3072 bits RSA) ...
user105523's user avatar
2 votes
2 answers
234 views

What drivers are causing an increase in authenticated encryption modes?

So I'm currently working through this cryptography question and so far I have the answer of an increase of hackers due to increase in computational power. But apart from that I don't know what else. ...
Thanos's user avatar
  • 193
2 votes
1 answer
467 views

CPA secure to CCA secure encryption

Can we use a MAC to transform a CPA secure encryption scheme into CCA secure one?
user104304's user avatar
-1 votes
1 answer
98 views

Simplification: Should we MAC-then-encrypt or encrypt-then-MAC?

I refer to Should we MAC-then-encrypt or encrypt-then-MAC?. There are 15 answers (today) with many words. It is difficult to tell which is the correct(?) answer. Also, the question excludes the ...
Paul Uszak's user avatar
  • 15.4k
3 votes
2 answers
401 views

Is disabling padding integrity check in CBC implementations a good way of overcoming / mitigating padding oracle attack?

Given that CBC mode has a padding oracle attack, would disabling the padding integrity check be a good way of overcoming the vulnerability (this may result in frustration among existing users with ...
Ravindra HV's user avatar
1 vote
2 answers
266 views

What is more efficient to Encrypt then MAC or to MAC then encrypt

I have been searching for resources on the internet about the efficiency of Encrypt then MAC, MAC then encrypt, MAC and encrypt, and hash then encrypt and I have come up short with all of them. Most ...
Cobb's user avatar
  • 13
0 votes
1 answer
71 views

Short description of encryption methods? [closed]

I can't seem to wrap my head around these encryption methods. I can't find a brief description for any of them. Hash then encrypt MAC then encrypt Encrypt and MAC Encrypt then MAC
Dylk58's user avatar
  • 1
2 votes
1 answer
348 views

How is RSA key exchange protected against tampering?

The public key is defined by (N, e) where N is the product of two large primes and e is ...
Abhisek Dash's user avatar
0 votes
1 answer
2k views

Using AES-CBC in TLS1.2

Is AES-CBC still vulnerable in TLS1.2 Or does the vulnerability only work for lower TLS versions? If not, why was it deleted in TLS 1.3?
miklo009's user avatar
2 votes
1 answer
164 views

Is the tag generated in MAC equal for equal messages in CBC-MAC?

The Cipher Block Chaining algorithm for generating message authentication codes uses a 0 IV . So my understanding is that same messages will generate same MACs which seems to violate semantic ...
Abhisek Dash's user avatar

15 30 50 per page
1
2 3 4 5
8