Questions tagged [aont]
AONT is an acronym for an all-or-nothing transform. An AONT is used in combination with encryption and it indicates that all of the ciphertext needs to be known to be able to decrypt.
13
questions
2
votes
1
answer
132
views
Does using a block cipher in CBC mode *twice* result in an all-or-nothing transform (AONT)?
Use a block cipher in CBC mode with a public or all-0 key. Twice.
Wrapping the last block into (xor) the first on the second round.
Every block will depend on all previous and all successive blocks. ...
0
votes
0
answers
66
views
Is there a public-key, "deal-less", all-or-nothing, "secret-length message" cryptosystem or some easy way to derive it?
I want to make an ecryption algorithm that is secure in, well, really many ways, which is hard I see, so I came up with some ideas of how to implement it using some primitives that I know and I ...
- 125
0
votes
0
answers
29
views
Simple scheme to publish data with a private key
The goal is for Alice to send an encrypted message to Bob. Neither Bob nor anyone else should be able to decode the message. Alice should be be able to decode it, when all data is shown to her. ...
- 101
1
vote
0
answers
348
views
Would a key recovery attack on ChaCha's keystream would be made more secure with an AONT?
To be clear I'm well aware that ChaCha doesn't need to be "improved". Also, I have no intentions or misguided ideas about trying to "improve" it. My question is hypothetical, and ...
- 1,443
4
votes
2
answers
326
views
Making a cipher non-malleable using a plaintext transform?
NOTE: By malleable/non-malleable, I mean the ability/or not to change a byte/block of the ciphertext and have it change only that byte/block of the plaintext.
I understand that we use authentication (...
- 1,443
1
vote
2
answers
260
views
Can Reed Solomon parity blocks be used as an all-or-nothing transform?
Consider the following scheme:
Perform an (N,N) Reed-Solomon encoding (i.e. N data blocks, N parity blocks)
Drop the N data blocks and keep only the N parity blocks.
Are these N parity blocks an all-...
- 317
0
votes
0
answers
114
views
Storing secrets on a peer-to-peer network by splitting up AONT data
I've come up with a way to transform a stream of bytes such that if any single bit is modified, it cannot be transformed back into its original state. Here's how it works:
Encoding
Get hash ...
- 1
1
vote
1
answer
129
views
OAEP security with variable length hash function
I'm implementing a hobby cryptosystem for fun and to increase my knowledge on the subject, and I was wondering if the OAEP construct was still sufficient as an all-or-nothing-transform if variable ...
- 189
3
votes
0
answers
60
views
Can you rely on the permutation of a ciphertext for secrecy?
Say you have a message and you run it through an all-or-nothing transform. A transform that requires every single block in the correct order in order to recover any data. Each block is ...
- 2,369
3
votes
0
answers
54
views
All-or-nothing transform that doesn't increase message size?
All of the AON transforms I've read about involve generating a key, which increases the message by a few bytes. Is there an AON transform that preserves the message size while still having avalanche ...
- 2,369
-2
votes
1
answer
126
views
Increasing the brute force search time by repeatedly using an an all-or-nothing transform as padding [closed]
I'll explain some extra steps I'd like add to the example given in this document, to further slow down each brute force key attempt, and then you guys can tell me why it wouldn't work.
As an ...
- 912
3
votes
1
answer
366
views
Is this an acceptable All-or-Nothing Transform?
I was thinking about AONTs, and designed the one below, I call it CHANT for Chained-Hash All-or-Nothing Transform; it's my very first shot at something of the sort, and was hoping I could get your ...
- 245
6
votes
2
answers
529
views
Length-preserving all-or-nothing transform
Is there any known way to construct a length-preserving all-or-nothing transform? In other words, a secure all-or-nothing transform where the length of the output is the same as the length of the ...
- 36.1k