Linked Questions
13 questions linked to/from Disadvantages of AES-CTR?
17
votes
4answers
4k views
Is SHA-256 secure as a CTR block cipher?
Generate a 256-bit random nonce. XOR it with a 256-bit reusable symmetric key. This is x.
We represent numbers in simple binary instead of a counting function. <...
12
votes
3answers
3k views
Using a Non-Random IV with modes other than CBC
The weakness CWE-329 is an interesting problem with CBC mode. However, does this same weakness affect the other modes of operation that rely upon an IV such as: PCBC, CFB and OFB? My gut feeling is, ...
9
votes
1answer
7k views
Bit Flipping Attack on CBC Mode
To perform a bit flipping attack, the previous block is modified by using XOR. This results in an altered plaintext. However, now the ciphertext of the previous block is altered, hence it will result ...
5
votes
1answer
220 views
Stream Cipher Key Stream from Successive Hashes
I'm currently studying crypto and wondered what would be wrong with the following process...
I want to encrypt a long message $M$ with a short symmetric key $K$ and a public nonce $X$.
The idea is to ...
0
votes
2answers
113 views
Is CTR more secure than CBC?
In cryptography, a block cipher mode of operation is an algorithm that uses a block cipher to provide information security such as confidentiality or authenticity. A block cipher by itself is only ...
2
votes
2answers
1k views
What is the difference between pseudorandom permutation/pseudorandom function/block cipher?
What is the difference between;
pseudorandom permutation
pseudorandom function
block cipher?
Very confused with the 3 terms and I am not good at advanced math. Can someone explain in plain word?
4
votes
1answer
338 views
What are the rules for using AES-GCM correctly?
When using AES-GCM I know that I am supposed to use a new initialization vector every time I call the AES-GCM algorithm with the same key. What are other rules must be followed to use AES-GCM ...
2
votes
1answer
244 views
What is the maximum number of messages that can be encrypted using the same key for CTR mode?
In the counter mode of encryption, the nonce cannot be used again unless a new block cipher key is chosen. What is the maximum number of messages that can be encrypted using the same key?
The maximum ...
2
votes
2answers
80 views
With AES-CTR does the block input need to be implemented as nonce || counter?
I am looking at an AES-CTR implementation (WebCrypto) and it takes an initialization parameter count which is an array of 16 bytes. It then asks you to specify <...
1
vote
1answer
73 views
Is Paillier a stream or block encryption
Does Paillier follow a stream encryption or block encryption technique.
If it’s a block encryption then what is the size of the block in bits or bytes.
3
votes
0answers
111 views
Is there any real attack deployed on the CTR mode over history?
The CTR mode, with its CPA security, is one of the malleable block cipher mode of operations. An attacker can simply modify the bits of the ciphertext stream in their advance. This is due to the lack ...
1
vote
1answer
77 views
AES CTR - Counter Management
Let ssuppose that we are using AES in CTR mode to encrypt a number of blocks ($x$ bytes each).
How is the current used IV (nonce+ctr) synchronized among both communicating entities?
I suppose that the ...
1
vote
1answer
42 views
Why are iterated substitution-permutation product ciphers only used on fixed-size plaintext blocks?
Another way to ask this question: when block ciphers were invented, why did they add the restriction that the block cipher would be restricted to blocks of a fixed size?
From my laymen's point of view,...