Questions tagged [aes]

AES (Advanced Encryption Standard) is a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.

Filter by
Sorted by
Tagged with
1
vote
1answer
69 views

Can I use different IVs when encrypting identical plaintexts with identical keys with AES-CTR?

I would like to use AES-CTR to encrypt the same plaintext with the same key more than once (on different machines). I'm wondering whether I should try to use the same IV each time, or whether it's ...
0
votes
0answers
44 views

What can be deduced/extracted from this local hash extracted from Windows Machine?

I'm new to cryptography. I've been experimenting with getting Windows hashes to see whether it's possible to reverse engineer. The following hash is what I got from my test laptop. What can you ...
0
votes
0answers
67 views

Can I and How Decrypt this Online

Although I had a security course in school a long time ago, I am effectively new to cryptography. I have an encrypted text, the encryption key of 44 characters, the encryption method, (Fernet, which ...
0
votes
0answers
62 views

Decrypting an AES string

I'm dealing with a website that loads a javascript file which eventually sets an AES hash/value (whatever it's called) as a cookie. The file is heavily obfuscated making it hard to understand certain ...
0
votes
1answer
83 views

Figure out chosen-plaintext-attack in Zerologon attack

Actually, I'm reading the description about Zerologon attack from the original whitepaper document. In there, Tom Tervoort mention these sentences: "So I tried to come up with some chosen-...
0
votes
1answer
64 views

Security of a custom AES-based attack model

Provided that: $AES(plaintext, key)$ is the standard AES block cipher for a 128 bits block. $\oplus$ is the standard XOR operation. $K$ is a constant 128 bits pseudorandom value, which is used as the ...
2
votes
1answer
39 views

Best suitable column type for openssl $tag,$iv,$key,$encrypted?

Which column type is best for storing $tag, $iv, $key, $encryptedData generated by openssl_encryption, and in which format I should save these values? I am using &...
1
vote
1answer
327 views

What is Associated Data in AEAD?

I am trying to understand what is AEAD exactly. I am application developer not a cryptographer. I have been searching online for a while watched a bunch of Youtube videos, read through a couple of ...
1
vote
1answer
52 views

Number message limits of Galois/Counter Mode (GCM) per key

In https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf page 27, it is said that ...the total number of blocks of plaintext and AAD that are protected by invocations of the ...
2
votes
1answer
133 views

How to check that an $km \times km$ block-binary matrix is an MDS matrix in $k$-bit words over $\operatorname{GF}(2)$

I have been reading about MDS matrices. It is defined as (paraphrased from Section 2.1) An $n \times n$ matrix $M$ is MDS if and only if $bn(M) = n + 1$ where $bn$ (branch number) is defined as: $bn(...
0
votes
0answers
70 views

AES homomorphic updates

I am looking for some help regarding something I am trying to do and I think to solution might be in Homomorphic encryption. Person A and B encrypt the same number(unsinged long) N using AES with ...
0
votes
1answer
84 views

Should I be worried about XTS tampering when encrypting backups using VeraCrypt?

From Wikipedia: XTS mode is susceptible to data manipulation and tampering, and applications must employ measures to detect modifications of data if manipulation and tampering is a concern: "......
2
votes
1answer
4k views

Encryption and decryption of Request and response for REST API

I am working on encryption/decryption for the rest of the API. The client here can be mobile, desktop, web browsers, etc and all the requests will be made to an https endpoint. The main goal here is ...
0
votes
1answer
90 views

Find first two blocks of plaintext given a final plaintext block, the IV and ciphertext for CBC?

I have the following: complete ciphertext; iv; last block of plaintext including the padding which is 04040404. The encryption was made using AES-CBC-256. I can ...
2
votes
1answer
60 views

Pipelined architecture for secret key block ciphers

I want to implement a pipelined architecture of AES128; and I couldn't figure out the number of the pipline stages. As I undestand, it is possible to make the piepline stages inside the round, or ...
1
vote
2answers
217 views

What is the proper way to implement AES CTR with 128 bit nonce and 64 bit counter?

While encrypting AES in CTR mode, the input to the AES encryption function is the either a combination of IV + $m$ bit counter or is either $0$ IV bits with an $m$ bit counter. It is however rare to ...
2
votes
3answers
433 views

Will Fernet’s key function at any timeframe?

I’m very new to cryptography and I need to use a symmetric cryptography approach. My simple question is, will the key always at any time be able to decrypt the encrypted text? The encrypted text may ...
1
vote
1answer
45 views

Issue with decrypting self-coded AES

Summary: As a trainee, I got the task to extract encrypted passwords of our external password manager (Zoho Vault) and decrypt them. The documentation regarding how to decrpyt them is...none. I ask ...
0
votes
0answers
21 views

Encrypting Sectors of MiFare Plus SE

I am trying to have some MiFare Plus SE cards manufactured but I was told that I need to give instructions on the HMAC encoding method, as shown in the image, which I understand and have done, but ...
1
vote
2answers
152 views

Problems with calculating inverse of finite field $GF(2^8)$ of AES

I know this question is being asked to death here but please hear me out. I was learning how to encrypt using AES and in one of the methods, we have to calculate multiplicative inverse in the finite ...
5
votes
1answer
633 views

How is it possible that these two encryption functions yield the same result?

I opened this post in stackoverflow some time ago where I explained a problem I had about not finding a way that would allow to successfully get the result of a string encrypted with a "aes-256-...
3
votes
0answers
51 views

How is the time intereval calculated for symmetric key re-negoatition in UK Security Standard – Use of Cryptography?

According to point 10.6.4 (Encryption in Transit) in Security Standard –Use of Cryptography, one of the criteria for key renegotiation is timeout , Encrypted sessions MUST re-negotiate new symmetric ...
2
votes
2answers
632 views

Are there actual consequences of padding oracle attacks?

I am writing a program that encrypts data in Python and heard about padding oracle attacks, but I think they are overrated (I mean, what are the real-world uses?) even for the old implementations that ...
3
votes
1answer
116 views

With AES encryption and a known key and plaintext, can an attacker create a different key and plaintext resulting in the same ciphertext?

In short: with AES encryption can an attacker create a new key2 and plaintext2 so that AESkey1(plaintext1) = AESkey2(plaintext2) If so, can it be solved by just applying for instance a MAC like AES-...
1
vote
1answer
384 views

OpenSSL aes-128-cfb does not produce expected size

I try to implement aes-128-cfb myself for learning. To confirm whether my implementation is correct, I want to verify it with a well-known library such as OpenSSL. But then I noticed something strange ...
3
votes
1answer
100 views

How much information do I leak if I upload multiple ciphertexts with cleartext overlaps?

Suppose that $t_1, t_2, \ldots, t_n$ are my clear texts. Suppose that for any $(i,j) \in \{1,2,\ldots,n\}^2$, $t_i$ and $t_j$ only differ in, say, the 1st $m$-many characters. Finally, suppose that I ...
1
vote
1answer
270 views

How do I safely encrypt a file for transport and storage?

So I need to encrypt a file server-side for transport from server to client and storage on client-side. I'm quite confused as to what I have to watch out for, as it seems like it's insanely easy to ...
2
votes
2answers
941 views

AES-GCM: Verification before Decryption

I am looking at ChaCha20Poly1305 WolfSSL. It is noted that the ChaCha20Poly1305 AEAD construction has the property, that it only outputs the plaintext, if the verification of the MAC (Authentication ...
-1
votes
2answers
165 views

Will OTP provide quantum resistance under 5 conditions?

We already have quantum computing, but when quantum computing becomes commercially available there is a problem for many but not all encryption algorithm. The One-Time-Pad or OTP is the one and only ...
0
votes
1answer
226 views

How to calculate size of a codebook lookup table to break block cipher?

I was reading a book called Serious Cryptography. There is a page saying that block size must be large enough to prevent codebook attacks: When 16-bit blocks are used, the lookup table needs only 2^...
1
vote
0answers
40 views

Looking for an algorithm to encrypt with a single key and decrypt with a lot of keys without consuming too much space

Is it possible to have an encryption scheme that could be encrypted with a particular key, then decrypted with a large amount of keys without massively inflating the size of the final result? I am ...
1
vote
1answer
106 views

Why does TLS 1.3 AES cipher require both a server and client traffic key/iv?

During the TLS 1.3 handshake using the cipher suite TLS_AES_128_GCM_SHA256 a server and client traffic key/iv will be derived using HKDF based on the shared secret, see rfc8446 #7.1 Why is it ...
0
votes
1answer
59 views

Is it safe to store AES encrypted string and the original string in plaintext next to each other?

I have a server app that stores encrypted payload ($textPayload) that users encrypted on their side (The server is just stores is and serves it). Users can use ...
0
votes
2answers
115 views

is it unsafe to AES encrypt using multiple modes?

Example: ...
2
votes
1answer
99 views

Using AES-CTR as a PRNG

AES-CTR is not considered as a CSPRNG, why ? Is it unsecure to use it when a password is hashed with Argon2id to produce the seed to generate all random data needed for an end-to-end encyption system ...
1
vote
0answers
57 views

AES encryption for repetitive small data packets

I'm trying to implement simple AES encryption for small data packets (8bytes, fixed length) being sent from nodes with very little computational resources. Ideally the encrypted data would be a single ...
0
votes
0answers
80 views

Client-Side Encryption for a small app

I'm designing a small personal journal web application for my wife. I'm a crypto newb, but I want her to feel secure knowing only she will have access to her journal entries. I am thinking of the ...
2
votes
1answer
252 views

Quadruple DES vs AES-128 security

I came across this question regarding the security of Quadruple DES (hypothetically DES done four times) in CBC encryption mode vs security of AES-128 in CBC encryption mode. What parameters help to ...
3
votes
2answers
515 views

Constant time multiplication in GF(2^8)

I am trying to implement AES in C; I would like to make it resistant to side-channel attacks but I can't implement the multiplication in constant time. My current code: ...
0
votes
1answer
80 views

Using HMAC with AES modes that do NOT require padding [closed]

I'm trying to use HMAC with AES modes that do not require any sort of padding. Although I am aware that modes like AES-GCM and ...
2
votes
1answer
182 views

Can repeatedly encrypting a message with a secure cipher ever produce the original input like what happens in ROT13?

Lets say we have a message 'm'. We encrypt 'm' using a stream cipher or any other type of cipher with cryptographic security that produces an output equal in length to the length of 'm'. Then if we ...
3
votes
1answer
236 views

AES-256, CBC, plaintext length is multiple of block size: Does PKCS #7 padding weaken the encryption?

Of course, padding is superfluous when AES with CBC is used if you know that the plaintext length is a multiple of the block size. But does the padding precipitate a weakness in the encryption? ...
3
votes
1answer
877 views

AES/ECB vs AES/CBC for <16 bytes

AES/ECB is commonly considered "weak" to the point that some static analysis software identifies it as not secure and suggests using AES/CBC instead. The question is: what if size of ...
2
votes
2answers
100 views

Construction of a “simple”, nothing-up-my-sleeves, provably KPA resistant symmetric cipher

Why is AES secure? Apparently there is no answer - Why is AES resistant to known-plaintext attacks?. With this in mind, one would obviously want a cipher that is mathematically provable to be ...
1
vote
1answer
69 views

Is there a way to change encryption scheme from AES to FHE without data leakage?

So let's say that we have encrypted some data using symmetric encryption in this case AES. And we want to change it to homomorphic encryption but without decrypting the data and encrypting it again ...
3
votes
1answer
67 views

Is precomputing AES-CTR key stream secure?

Q0 : Is the precomputed key stream vulnerable to side-channel attacks like a lookup table for exemple ? I don't think it is because a lookup table is accesed very often, that's what makes it non ...
2
votes
0answers
37 views

Looking for a way to enlarge a message so that any modification to the “enlarged” message makes recovering the original message impossible

Let's say we have a message m of small size. I am looking for a system $S$ so that $S(m)$ is arbitrarily large, we can easily compute the inverse $I(S(m)) = m$, and any modification to $S(m)$ makes it ...
1
vote
1answer
231 views

I do many searches but can't find any explanation about “AES analysis using entropy”

I found this scenario in CRYPTOOL2 templates but there is no explanation how entropy is used. There is just a short description "This template shows how to use a brute-force search to attack an ...
0
votes
2answers
331 views

Find IV and the key ? AES with CFB or OFB

I have a question about the AES-128 and AES-256 encryption method. I need to encrypt 64-bit size data in and out. I want to encrypt them with AES. So I turned to AES-OFB or AES-CFB because these ...
2
votes
0answers
70 views

Content Key Encryption for Multi-User data access

I recently worked out a concept for a use-case, but I'm not sure if my approach is good enough. So I would appreciate feedback and things to look out for, as I'm fairly new to this field. A User can ...

1
3 4
5
6 7
45