Questions tagged [aes]

AES (Advanced Encryption Standard) is a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.

Filter by
Sorted by
Tagged with
2
votes
1answer
5k views

Encryption and decryption of Request and response for REST API

I am working on encryption/decryption for the rest of the API. The client here can be mobile, desktop, web browsers, etc and all the requests will be made to an https endpoint. The main goal here is ...
0
votes
1answer
33 views

Using shared secret as Out-Of-Band authentication data in Bluetooth pairing

According to the Bluetooth Specification, the pairing process starts with Slave sending a connectable advertising packet and then the Master initiates the connection. In LE Legacy OOB authentication a ...
1
vote
1answer
50 views

PRNG For RSA (ANSI_X9.31)

I have a query please , I want to know how to generate random numbers using ANSI_X9.31 algorithm for RSA Algorithm please . Thank u
3
votes
1answer
242 views

Why does AES use a Binary Field?

The key idea in AES is the use of matrix multiplication and the corresponding inverse (as opposed to Feistel). But the algorithm does that using a GF instead of simple modular arithmetic. Is there ...
0
votes
0answers
46 views

Are there any block ciphers (like AES) which are (or can be) commutative under composition for different keys?

Let $BC$ be a block cipher with similar security as AES (in ECB mode). This $BC$ is applied to a message $m$ of same bit size. The result is a cipher $c$. e.g.; $$BC(key_A,m) = c_A$$ $$BC(key_B,m) = ...
1
vote
1answer
2k views

AES MixColumns, Predefined Lookup 2D Tables, and Rcon Predefined Lookup 2D Table

I need a copy of the predefined 2D table lookup for AES MixColumns when the state is multiplied by 2 and 3, 9,11,13,14, and the Rcon predefined table. I have searched for them everywhere with no luck. ...
1
vote
0answers
45 views

ε-close to t-wise inependence of SPN (AES)

According to theorem 3.13, the 6 rounds of AES is 0.472-close to pairwise independence. It is also mentioned t-wise independence used to analyze higher order derivates attacks. it is also mentioned 3-...
0
votes
1answer
86 views

Which encryption technique should be adopted to keep the search functionalities?

I am in exactly the same situation as described in this post. I must be able to encrypt data from a client workstation then send it to an untrusted server (encrypted at rest), then decrypt it only on ...
1
vote
2answers
106 views

Does reusing IV in AES-CBC weaken it?

Rsynccrypto allegedly uses AES-CBC with a twist: If the last few bytes of plaintext meet a condition*, then stop, pad the current block and start encrypting new block from the current position in file ...
1
vote
1answer
50 views

Encryption of small data with fixed key and incremental IV

I have a Bluetooth device that sends a small package periodically (without receiving). I want to encrypt and authenticate the data using AES-128. It has an embedded random and unique key which is ...
2
votes
1answer
171 views

MS CryptoAPI RC4-1024 vs AES-128?

I'm trying to figure out MS CryptoAPI to generate a symmetric key on one computer then an RSA key on another, send over that public key to use to export the symmetric key to that other computer. I'm ...
1
vote
1answer
162 views

Why using same nonce (IV) twice voids confidentiality of plain text or even key?

I understand roughly (without details of GF algebra) the scheme of GCS/GMAC: IV is to be put into Counter-0, so initializing counters. It is known, that using a IV twice can not only reveal the plain ...
0
votes
0answers
64 views

CTR mode calculate messages before new key is required

I am studying a cryptography video on Coursera here titled: Modes of Operation: Many Time Key (CTR). I have just two simple questions: At around 4:30 in the video they show 2^48 without saying where ...
0
votes
1answer
68 views

Splitting an AES-256 key into two?

I understand there are already few question here which are similar but mine is a bit different in that I want to split AES 256 bit into two 128 bit key and then use a different AES key of 128bit to ...
1
vote
1answer
30 views

Cyclicity of AES [duplicate]

It is known that AES is extremely secure, with its highest standard(AES-256) being able to protect the national secrets of most governments. Due to the nature of its steps, there's the question about ...
0
votes
1answer
59 views

in what condition, 2 different AES 128-bit Keys generate at least 6 bytes identical ciphertext on same plaintext

as mentioned in the title, and read some past discusstion on AES collison here. it shows it's possible that, AES(k1, m1)=AES(k2, m1) just wondering what condition those 2 keys need to meet. Thanks.
0
votes
1answer
139 views

Verification of data on an untrusted remote storage server

I was looking at tahoe-lafs which accepts a file, encrypts it, does erasure coding on it which generates n shares and then distributes it over the storage servers. The distribution is Share 1 = Server ...
1
vote
2answers
488 views

So is AES-256 more secure or less secure than AES-128 after all?

It seems there are attacks that work more effectively on AES-256 than AES-128, which makes it less secure in some cases. But the bigger key size should add some safety margin on the other hand, for ...
0
votes
0answers
18 views

How does encrypting a file with AES affect file size? [duplicate]

I am wondering if encrypting a file with AES will reduce or increase its file size and generally by how much. Thanks for any tips or advice.
1
vote
0answers
81 views

End to end encrypted chat design

I am in the process of creating a flutter application that will include direct messaging. You can message 1 person or a group of people. I want this to all be encrypted for privacy. The method I was ...
0
votes
1answer
89 views

Figure out chosen-plaintext-attack in Zerologon attack

Actually, I'm reading the description about Zerologon attack from the original whitepaper document. In there, Tom Tervoort mention these sentences: "So I tried to come up with some chosen-...
0
votes
0answers
37 views

Proper implementation AES-256 for single block E_k then being used on AES-GCM

My first objective is to implement AES-GCM in PowerShell 5.1 since there is not an implementation that not use external dll libraries. According to the GCM schema of encryption: the E_k block should ...
6
votes
2answers
870 views

What are the popular modes-of-operation (AES-GCM, AES-SIV, AES-GCM-SIV, etc.) geared for?

I'm interested in developing software capable of encrypting personal files (which will ultimately be backed up to the cloud) and have been doing my best to follow best practices. There are many forms ...
1
vote
1answer
40 views

Securing counter value for OTP [closed]

I'm working on a project that needs an OTP based on counter value and needs some advice. Suppose we encrypt the counter value C in this way and let's say our sending packet is P = AES(key,C). If ...
0
votes
0answers
33 views

¿Can it be proved that both AES's ShiftRows and MixColumns are linear transformation? (if we leave out subBytes and key addition)

I've been researching a bit and found that the mixColumns step could be expressed as matrix multiplication like this: But I'm not sure what's the mathematical proof for it and I can't find an example ...
0
votes
1answer
92 views

How secure is AES 256bitkey generated from PBKDF2

I am using CryptoJS AES 256 encryption: CryptoJS.AES.encrypt(realData, generateKey(passphrase), {iv: iv}); The secret is generated through: ...
1
vote
2answers
186 views

Crack AES encryption via passphrase dictionary attack?

How easy would it be to crack a AES-256 encrypted file, that is protected by a passphrase? I understand that the trying to brute force a AES-256 encryption key would be on the unfeasible side, even ...
0
votes
1answer
43 views

Deterministic data masking

We are building out data masking framework mainly to mask PIIs. Our scale is pretty large, and masking will be done at ingest time, so we want the masking to be done in a very performant manner. Some ...
1
vote
1answer
87 views

Why is it not possible to attack an AES by creating a function to model the substitution that occurs in a s-box?

I realise that s boxes are able to make the transformations done in AES non-linear. However I am unsure how this makes AES secure. For instance if we had no s box then it is possible to calculate the ...
0
votes
0answers
29 views

A few questions regarding the 4-Round AES-Distinguisher (by Gilbert and Minier) and DS-MITM

I am struggling to understand the DS-MITM attack on AES (Original Paper). Especially the 4-rounds distinguisher by Gilbert and Minier (section 3). I get the basic idea that we check exactly on which ...
1
vote
2answers
152 views

How to minimize AES output size?

I work on a project about CAN bus and I want to encrypt the data among nodes but I have have a problem because CAN bus nodes receive and send 8 bytes among each others and I know the size of AES ...
1
vote
0answers
35 views

Does my asymmetric/symmetric mixed file encryption pseudo code pass sanity check?

I realize this depends on my implementation and the implementation of the libraries I use. I am asking about my process assuming that the encryption libraries and my code are not flawed/compromised, ...
1
vote
1answer
40 views

How to prove the pseudorandomness of CryptoPAn

in my cryptography course, we are learning about pseudo randomness and the prefix-preserving function known as CryptoPAn invented in 2002. It is said that the scheme is highly insecure. So in that ...
1
vote
1answer
397 views

Online AES Calculator

I am currently looking into how AES works and found a calculator online: http://testprotect.com/appendix/AEScalc I understand that the AES process has 10 rounds of calculations. Does this mean that ...
0
votes
0answers
206 views

Is OpenSSL enc using AES-256-CBC to encrypt large files safe?

I first generate a keyfile with openssl rand -hex 64 -out keyfile. I then encrypt the file with ...
0
votes
0answers
35 views

Decrypt encryptedKey session key using - AES-128 - PKCS-1#rsaes-kem-kdf2-kw-aes128

I have basic knowledge about how encryption algorithms work such as RSA, AES and so on. I have an XML response encrypted with both AES and RSA. I tried using OpenSSL to decrypt with several steps but ...
0
votes
1answer
79 views

AES-GCM can IV be stored alongside in DB?

I'm trying to encrypt and store strings in PHP as per example #1 on the PHP openssl_encrypt documentation. ...
1
vote
1answer
196 views

Best practise for encryption in a password manager

I'm trying to make a password manager for Windows installed computers, and after researching the best ways to encrypt the passwords in the database (I'm new to cryptography) I think I've come up with ...
2
votes
1answer
77 views

Is this a valid AES instruction reordering?

I'm trying to understand a verilog AES implementation. I know the order of the AES encryption steps to be as shown: However the code I see doesn't do this. They do the following flow graph: at the ...
0
votes
1answer
117 views

How to use nonce, counter, and IV in AES-256-CTR?

preface: i am not cryptographically savvy. there are similar questions on this board but they do not give the answer i need. how do i construct a valid IV, given a nonce? What does this have to do ...
1
vote
0answers
16 views

Is it possible to crack AES-256 ECB when provided with the ciphertext and a portion of the corresponding plaintext? [duplicate]

AES-ECB encrypts the message by breaking it into blocks and encrypting them one by one. Provided the knowledge of the ciphertext, a portion of the plaintext that corresponds to a block in the message, ...
2
votes
1answer
123 views

Do some Block Cipher Modes encrypt the nonce and then XOR it with the data?

Reading https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Counter_(CTR) it looks like CTR (and some other modes) encrypt the nonce (plus count, for CTR) rather than the plaintext. The ...
2
votes
1answer
65 views

Is a Test Vector feature a Security Hole?

I have a system where a block cipher key (likely AES) is entered via a 'command line' over a serial console, probably as hex. The system has no 'print key' feature, so the key is hopefully 'ingest ...
1
vote
1answer
1k views

AES-GCM GHASH calculation;

I'm trying to make an GHASH() function and need some clarification. Implementation is based on gcm-spec. Page 8 describes polynomial mult and page 27 has a "Test Case 2" which I use to verify result. ...
9
votes
4answers
561 views

One round of AES-128

Maybe it’s a silly question, I’m interested in the best known/chosen plaintext attack on only one round of AES-128. More specifically, what is the smallest number of known/chosen plaintext/ciphertext ...
6
votes
1answer
12k views

Why is OpenSSL generated 256-bit AES key 64 characters in length?

This might be a noob question, but I couldn't find its answer anywhere online: why does an OpenSSL generated 256-bit AES key have 64 characters? The command I'm using to generate the key is: ...
1
vote
1answer
65 views

Can an encryption key be inferred by knowing the plaintext and the corresponding ciphertext?

Thinking about validation methods for guaranteeing a proper key is used. Will keeping a dummy plaintext value and its corresponding ciphertext in plaintext code expose any risk?
1
vote
0answers
44 views

Multiplication in Tower Field $GF(2^4)^2$

I'm currently reading an article which deals with "Squeezing Polynomial Masking into Tower Fields " for performing an efficient multiplication of elements in $GF(2^8)$. Thereby it is ...
2
votes
1answer
47 views

Is it possible to do partial message authentication?

I want to authenticate part of a message, not all of it, while creating the MAC over the entire message. Let's say I create a 16B MAC over one hundred message blocks that are 64B each. Then I send one ...
5
votes
2answers
436 views

7-Zip Encryption: Practical Effect of Lacking Salt

A previous discussion on Cryptography StackExchange leads me to understand that 7-Zip does not use salt to derive an encryption key from password to use its AES-256 encryption; that this is a ...

1
2
3 4 5
46