Linked Questions
10 questions linked to/from Changing an Encryption scheme from AES to ChaCha20
64
votes
5
answers
103k
views
What's the appeal of using ChaCha20 instead of AES?
I read about ChaCha20 being used in TLS by Google, SSH, and towards standardization in general.
What's the appeal of using something other than AES, what with AES receiving dedicated CPU instructions ...
- 743
14
votes
5
answers
10k
views
Does Grover's algorithm really threaten symmetric security proofs?
By Shannon's theorem of perfect security, if I give you a ciphertext 'LOUPL', you can do a brute-force attack and then you would find plaintexts like 'HELLO', 'APPLE', 'SPOON', but you can't ...
- 171
4
votes
2
answers
4k
views
Which block cipher mode of operation does TLS 1.3 use?
Which block cipher mode of operation does TLS 1.3 use? I assume it is a block cipher mode that provides authentication (like GCM).
- 117
16
votes
1
answer
9k
views
What are the rules for using AES-GCM correctly?
When using AES-GCM I know that I am supposed to use a new initialization vector every time I call the AES-GCM algorithm with the same key. What are other rules must be followed to use AES-GCM ...
- 681
0
votes
1
answer
1k
views
Fastest cipher for use with openssl and x86 (Intel)?
I have a C++ application on Intel x86 using openssl to make a connection to a server. What is the fastest cipher that openssl supports? My implementation is currently using ...
- 123
3
votes
1
answer
331
views
Are block ciphers still relevant in 2024?
Is the general approach of block ciphers still relevant when we have secure and performant pure stream ciphers?
For example, TLS 1.3 supports both AES-GCM and chacha20-Poly1305. But I don't understand ...
- 129
0
votes
0
answers
288
views
Speed comparison of encryption algorithms
I am trying to compare various encryption algorithms in terms of encryption duration, decryption duration, information entropy, NPCR, UACI, and correlation coefficients.
I used a Lena 256x256 ...
- 1
0
votes
0
answers
152
views
Is ChaCha20Poly1305 post quantum secure? is it better than AES-GCM or AES-OCB with 256 bit key? [duplicate]
I read online that AES-256 is Quantum Safe , so AES-256 used in AES-GCM and AES-OCB should be quantum safe , just wondering is ChaCha20Poly1305 quantum safe , if it is then is it better than AES-256 ...
0
votes
2
answers
86
views
Are there any papers talking about generating the pairs used in differential cryptanalysis or impossible differential Cryptanlysis?
I'm trying to implement impossible differential cryptanalysis on IDEA cipher based on the Miss in the middle attack on IDEA and Khufu paper.
I'm trying to implement the attack on 3.5-Round IDEA and I ...
- 301
0
votes
0
answers
76
views
ChaCha20 1Gb encryption speed question
I wrote a simple implementation of ChaCha20 encryptor for files in C using MbedTLS implementation. The process of encryption is standard - I set key, then for each block of fixed size I generate new ...
- 1