Questions tagged [aes]

AES (Advanced Encryption Standard) is a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.

Filter by
Sorted by
Tagged with
1
vote
1answer
59 views

Baby steps with example, looking for an "AES for Idiots" type of explanation

Countless examples all over on implementation of AES. None of these actually make sense to someone with zero cryptographic or advanced mathematical experience. This => too abstract & technical.....
1
vote
1answer
58 views

AES CBC key reuse and derived keys

Suppose we are encrypting multiple files with AES in CBC mode and using 256 bit keys. Assume the IVs for the files are randomly generated with a secure method. Assume some key $K$ is generated with ...
0
votes
1answer
57 views

Is the Key Exchange authenticated and confidential?

I have made a private messaging program and would like to check that nothing is stupid in my use of cryptography. I am an amateur and nothing is for production. I thank you in advance. The message ...
1
vote
2answers
77 views

changing messages for authentication without the tag changed. (CBC-MAC)

do you know about CBC-MAC? I have iv ,MAC and Transaction but no key. and I should change Transaction without change cipher text. do you know how this is possible at all? In addition, I do not have ...
0
votes
1answer
51 views

Deterministic key selection using iterative value comparison - how dumb was this?

Just to start, this is mainly a curiosity question that's been nagging me for a while. I did a fair bit of googling to see if someone has already performed a righteous expose of this silly idea, but ...
0
votes
1answer
72 views

How strong would be create a password through AES ECB encryption?

Suppose that I want to use a "poor man" password management working as follows: 1. I choose and remember one single master password (for example "78HK+jm?329"); 2a. for any bank, ...
2
votes
0answers
85 views

How much information is required to specify a new variant of AES beyond the key length and the number of rounds?

Three different versions of the Advanced Encryption Standard (AES) have been standardized, which use keys of bit length 128, 192, and 256 respectively. They also use different numbers of rounds: 10, ...
1
vote
1answer
102 views

How to calculate the Inverse of random AES S-BOX (asuming we don't know how the S-BOX built)?

I'm recently studying cryptography, and I have a task for collecting the s-boxes for AES, and then implementing that s-boxes for encrypting & decrypting, but most of the S-boxes I found are not ...
4
votes
1answer
132 views

Java: SecureRandom.getInstanceStrong() vs new SecureRandom()

Given SecureRandom class is considered suitable for use in cryptography, I consider new SecureRandom() to be secure (funny term, ...
2
votes
2answers
52 views

Why bother to generate Key, IV and encrypt them?

When we perform encryption with Public or Private Key, Asymmetric AES with RSA and CBC 128, and when we use the padding as well. Why do we have to bother adding the additional: Key + IV? ...
7
votes
2answers
210 views

Is possible to a implement AES in a electromechanical machine in the 1900?

Can AES be implemented in a electromechanical machine in early 20th century? Specifically does any machine from that era have the capability to implement byte-oriented S-Box, or to implement the ...
5
votes
1answer
251 views

TLS 1.3 - Why have no encrypt-then-MAC modes been specified?

I have been scratching my head for a while why TLS 1.3 does not include any encrypt-then-MAC (EtM) modes. All the previous problems in TLS have been caused by MAC then and encrypt. Whereas encrypt ...
0
votes
1answer
46 views

Security in a pipeline

I am new to cryptography, I am trying to design a secure pipeline environment for the fast transfer of messages. To reduce the Key size I am planning to encrypt the messages with AES session keys (for ...
2
votes
2answers
381 views

Distinguishing the correct IV from incorrect IV in AES CBC when key is known

Currently, I'm using a static IV value for all encryption and decryption but I would like it to be dynamic for each encyption/decryption request so I started using new byte[16] and it works. The ...
0
votes
2answers
69 views

Bringing a key to 256 bit by a hash algorithm

For example, if I use Rijndael for encryption, I have to specify a key of a certain length. For user convenience, I want the user to be able to use a key of any length. Then, to get the key to the ...
1
vote
1answer
65 views

Can attacker steal data from AES encrypted table without knowing the key?

I think of a situation that attacker can steal data from AES encrypted table without knowing the key. I tried to search on internet but found nothing about this(may be I were not using the correct ...
1
vote
1answer
49 views

Where to store salt for PBKDF2 and initialization vector for AES via WebCrypto

I would like to build secure notes via javascript and webcrypto. I have found the possibilities to generate strong key via PBKDF2 and encrypt data via ...
1
vote
1answer
93 views

Is it okay to avoid a plaintext IV in AES?

The scenario Using AES 256 with CBC mode. (Authentication is done separately. Ignored here.) The goal (explained more later) To avoid sending an unencrypted IV. But since this is being done using .NET ...
0
votes
1answer
87 views

How expensive is it to migrate from AES-128 to AES-256

How feasible would it be to migrate from AES-128 to AES-256?
1
vote
2answers
98 views

In AES-256, what exactly forms the extension field $GF(2^8)$?

My question is a little difficult to describe, so let me first start with an analogy In an elliptic curve over a finite field, there are 2 groups - the first group is a finite field over which the ...
1
vote
1answer
67 views

Do I need to change IV in AES-256 GCM when I only use encryption for challenge-response exchange with random string?

When I want to use encryption only for challenge-response exchange and not for hiding the contents of an encrypted message, is it still a threat to me not changing IV for new encryption? For easier ...
0
votes
1answer
85 views

how to break AES [duplicate]

why is breaking a (asymmetric) 1024 bit RSA key less difficult than breaking a 128 bit (symmetric) AES key? Breaking RSA key involves finding the prime factors of a large number. What is involved in ...
1
vote
0answers
42 views

Why can't we have AES512 or more? [duplicate]

Look I know AES256 is ridiculously secure but to keep aes secure even after quantum computers, I have a concern. Using the Grovers theorem aes can be reduced from 256 to 128 bits for brute force ...
3
votes
2answers
122 views

Why is confusion and diffusion never talked about in asymmetric crypto?

While talking about symmetric encryption schemes like AES we always have a goal of achieving confusion and diffusion. But when it comes to asymmetric encryption schemes like RSA, DH etc. we never talk ...
0
votes
2answers
103 views

How does AES-256 works if AES is only a 128-bit block cipher?

I'm currently studying AES encryption and I'm quite confused on how do we use a 256-bit key in AES? Becuase in my understanding, AES no matter what the key size is, it still operates and encrypt a 128-...
1
vote
1answer
214 views

AES-CBC Hash Function Collision Resistance

I am using AES-CBC as a hash function which is encrypting a block of length n. The blocks, m = (m1, m2, ..., mn). The IV is one block long and the encryption key is length 128, 192 or 256 bits. Will I ...
2
votes
1answer
267 views

What is the main problem with zero padding for AES key?

I am trying to understand the logic behind some basic principles of AES key padding. Why do we use different kinds of AES key padding schemes instead of the simplest zero-padding? Take AES-128 for ...
0
votes
1answer
75 views

What is the need of substitution and permutation networks in AES?

I have tried to answer this question for quite some time now. But a complete intuitive understanding still eludes me. Consider an alternate construction for a block cipher without any substitution and ...
0
votes
0answers
36 views

recover plain text from cipher text in AES-128 ECB mode [duplicate]

I have a scenario where I do not have the key but I have plaintext 1, ciphertext 1, and ciphertext 2. Ciphertext 2 is built using the same key that was used to build ciphertext 1. Is there somehow a ...
3
votes
1answer
49 views

Is it safe to use AES-CCM only for authentication - i.e. for sending AAD without encrypted data?

We are employing an AES-CCM 128-bit stream-cipher with 7-Byte Nonces and 12-Byte Authentication Tags in a communication protocol. Up until this point there was no need to use Additional Authenticated ...
3
votes
0answers
74 views

Encrypt/Cipher and Decrypt/Decipher a string with a secret

In developing an app I have a simple use case in where I want to encrypt/cipher a string (it could also be a couple of bytes because it's essentially just an IP-Address). On the output I think it ...
1
vote
2answers
243 views

Why is possible to encrypt multiple messages within the same stream in AES

I have a standard random key and IV. Then I am creating a cipher using these keys and iv and then encrypt a specific message. Later on, if I try to encrypt another message with the same cipher(which ...
1
vote
1answer
111 views

Two-way encryption algorithms similar to bcrypt

I'm in need of an algorithm that can perform a very specific task: take a short string, encrypt it using an algorithm which can be scaled to keep up with Moore's Law/has a proof-of-work factor/is ...
2
votes
1answer
86 views

How can we link AES with Elliptic Curve Diffie-Hellman Key Exchange Method

Actually, I am working on a project to combine symmetric and asymmetric cryptographic algorithms. The shared secret key for AES will be generated through the Elliptic Curve Diffie Hellman Key Exchange ...
1
vote
2answers
93 views

RSA encrypt an AES key. What about the AES IV?

I need to securely pass an AES key to a remote client. What I did so far is to generate a random AES key and encrypt it using the RSA public key of the client (PKCS#1 v1.5 padding is taken care by the ...
1
vote
2answers
51 views

Block cipher design criteria when specifying key size

For a given block size of N bits, the total number of possible permutations is (2^N)! In order to select from any one of the possible permutations, the key would have to be of length log2((2^N)!) ...
1
vote
4answers
452 views

Can you decode aes by hand if you have the key?

I made a javascript aes encryption program and I do have the key to what I encrypted. Is there a way to use that key and figure out what was encrpyted without help of a program? I encrypted "...
0
votes
0answers
49 views

How can a concatenation of $N$ block-cipher with known keys be more secure?

General problem / Intro: encrypting the (computable) relation in between two random numbers which are members of a as small as possible set while anything except the order of execution is known to the ...
0
votes
1answer
145 views

How to choose between AES256-GCM, XSalsa20Poly1305 and XChaCha20Poly1305?

In libsodium, there're 3 symmetric encryption(stream cipher) which are AES256-GCM(Hardware-accelerated), XSalsa20Poly1305 and XChaCha20Poly1305(uncertain which version of libsodium add support to ...
1
vote
1answer
81 views

Can a block-cipher considered secure if a bit-change of the input leads to a 50% chance change for every single output bit? -> round number?

Block-cipher use self-inverse ($f(f(x)) = x $) operations which then will be applied to the plaintext and most likely contain some constants which can be based at a key. To get security such ...
1
vote
0answers
62 views

Key rotation and versioning for encryption at rest

I'm working with a dev team who are implementing encryption at rest at the application level. It's for particularly sensitive fields inside an RDB. (The underlying DB storage has an additional layer ...
1
vote
1answer
51 views

Generate unique random values for unqiue input values

I'm going to generate unique random values based per a range of unique input values. In other words I have range of input values which these numbers are part of a series (like a range of serial ...
1
vote
0answers
37 views

What is aes in "operational mode"

I'm currently reading this report on the security of the IOT protocol "LoRaWAN". On page 3, it says the following: ...
0
votes
1answer
115 views

Using AES.MODE_EAX for AES Encryption [closed]

I am currently attempting to perform AES encryption in Python on a larger size file for simulation purposes. At the moment, I have been trying to use AES.MODE_EAX, as mentioned in the documentation ...
0
votes
2answers
70 views

Grover algorithm for AES in CBC mode

Hello, I was wondering whether it is theoretically possible to use Grover alrogithm to break AES in CBC mode. Assume that I have ~1000 plaintext/ciphertext pairs and key length is 128 bits. I thought ...
3
votes
2answers
118 views

Protecting AES via Shamir Secret Sharing

This is about the paper Protecting AES with Shamir's Secret Sharing Scheme by Louis Goubin and Ange Martinelli which describes how to use Shamir Secret Sharing to obtain masked implementations of AES. ...
4
votes
2answers
143 views

What would be the requirements for a new-age cipher standard?

While nowhere near being broken, AES has known attacks like reading from the substitution table, memory-based attacks, etc. If we keep getting better at breaking ciphers and we eventually get close to ...
0
votes
1answer
59 views

does OFB mode has diffusion on the plaintext?

In some block modes, if we change one bit (or more) in the plaintext, the whole block\ciphertext will be changed (i.e ecb: block will be different. cbc: whole ciphertext will be different) Does ...
1
vote
2answers
49 views

RC6 Integer operations in modulo 32 between two 32-bit blocks

I am new to cryptography and I am trying to code the RC6 (Rivest cipher 6) algorithm. The algorithm requires addition, subtraction and multiplication in modulo 232. If I am performing these operations ...
1
vote
1answer
90 views

How is WinZip AES different from normal AES

I'm trying to write a function in dart that can can decrypt a file inside a zip that is encrypted using the WinZip AES-256 standard. Documentation I have found here: https://www.winzip.com/en/support/...

1
2 3 4 5
47