Linked Questions
30 questions linked to/from Disadvantages of AES-CTR?
0
votes
2
answers
915
views
Encryption algorithm multiple threads/cores for higher throughput
There are situations where a single connection (or file) may require additional throughput available. While network bandwidth and CPU cores are available, they cannot be utilised. (Aside from means ...
2
votes
2
answers
728
views
How much data can we encrypt using AES 256 before changing the key?
Although this question has been answered in this link (After How Much Data Encryption (AES-256) we should change key?), I am not satisfied with the answers because the Recommendation for Block Cipher ...
1
vote
1
answer
478
views
CTR block generation
From what I understand, CTR works by taking a counter, concatenating it with a nonce, and encrypting the result, which gets XORed to the ciphertext. For a 128-bit block cipher (ie. AES), my ...
1
vote
1
answer
130
views
Is Paillier a stream or block encryption
Does Paillier follow a stream encryption or block encryption technique.
If it’s a block encryption then what is the size of the block in bits or bytes.
2
votes
2
answers
538
views
With AES-CTR does the block input need to be implemented as nonce || counter?
I am looking at an AES-CTR implementation (WebCrypto) and it takes an initialization parameter count which is an array of 16 bytes. It then asks you to specify <...
2
votes
1
answer
848
views
AES CTR - Counter Management
Let ssuppose that we are using AES in CTR mode to encrypt a number of blocks ($x$ bytes each).
How is the current used IV (nonce+ctr) synchronized among both communicating entities?
I suppose that the ...
5
votes
1
answer
306
views
Stream Cipher Key Stream from Successive Hashes
I'm currently studying crypto and wondered what would be wrong with the following process...
I want to encrypt a long message $M$ with a short symmetric key $K$ and a public nonce $X$.
The idea is to ...
1
vote
1
answer
127
views
Why are iterated substitution-permutation product ciphers only used on fixed-size plaintext blocks?
Another way to ask this question: when block ciphers were invented, why did they add the restriction that the block cipher would be restricted to blocks of a fixed size?
From my laymen's point of view,...
3
votes
0
answers
263
views
Is there any real attack deployed on the CTR mode over history?
The CTR mode, with its CPA security, is one of the malleable block cipher mode of operations. An attacker can simply modify the bits of the ciphertext stream in their advance. This is due to the lack ...
14
votes
1
answer
7k
views
What are the rules for using AES-GCM correctly?
When using AES-GCM I know that I am supposed to use a new initialization vector every time I call the AES-GCM algorithm with the same key. What are other rules must be followed to use AES-GCM ...
3
votes
1
answer
1k
views
What is the maximum number of messages that can be encrypted using the same key for CTR mode?
In the counter mode of encryption, the nonce cannot be used again unless a new block cipher key is chosen. What is the maximum number of messages that can be encrypted using the same key?
The maximum ...
2
votes
2
answers
5k
views
What is the difference between pseudorandom permutation/pseudorandom function/block cipher?
What is the difference between;
pseudorandom permutation
pseudorandom function
block cipher?
Very confused with the 3 terms and I am not good at advanced math. Can someone explain in plain word?
5
votes
1
answer
31k
views
Is regular CTR mode vulnerable to any attacks?
Regular plain CTR mode, is it vulnerable to any attack?
I plan to write a program to encrypt a drive with ctr mode. Would this be wise? Would AES be better?
When I look at this diagram, it looks ...
19
votes
4
answers
5k
views
Is SHA-256 secure as a CTR block cipher?
Generate a 256-bit random nonce. XOR it with a 256-bit reusable symmetric key. This is x.
We represent numbers in simple binary instead of a counting function. <...
12
votes
3
answers
3k
views
Using a Non-Random IV with modes other than CBC
The weakness CWE-329 is an interesting problem with CBC mode. However, does this same weakness affect the other modes of operation that rely upon an IV such as: PCBC, CFB and OFB? My gut feeling is, ...