Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [block-cipher]

A block cipher is an encryption algorithm which encrypts fixed-size blocks of plaintext to same-sized blocks of ciphertext. For good ciphers every bit of the ciphertext block depends on every bit of the plaintext block and every bit of the key.

4
votes
2answers
86 views

Is there a maximum amount of data which can be encrypted using a symmetric (AES256) key?

I am working on an application where we will be encrypting billions of small (< 2,000 bytes) records. Combined, we are facing many TB of data. Each record will be encrypted independently, using a ...
1
vote
1answer
111 views

Help understanding how to decrypt cipher

I am trying to create a padding oracle attack to decrypt a cipher that is encrypted with cbc and PKCS#7 padding. My first step is just to try and decrypt the second block. I have read a lot about it,...
0
votes
1answer
30 views

Determine whether nonlinear boolean function is balanced or not

Is there any way to check that a nonlinear boolean function is balanced or not? I can't think any other way except to check all input variables.
2
votes
1answer
84 views

What are the advantages of SM3 and SM4 compared to NIST-approved algorithms (SHA3 and AES)

Armv8.4-A will add extended support for more cryptographic primitives, to include SM3, which is a cryptographic hash function used in the Chinese National Standard; and SM4, a 128-bit block cipher; ...
1
vote
2answers
172 views

What are the implications of XORing ciphertext with plaintext?

I was intrigued by this question: Does adding complexity mean a more secure cipher? And it led me to wonder: What are the implications (if any) of XORing a ciphertext with the original plaintext ...
0
votes
0answers
41 views

System equations for S-boxes

I`m on searching of any method of building system equations for S-boxes. Firstly, I just cannot undestand exact meaning of "system equations", is it anf for each input (I know how to make it using ...
2
votes
1answer
91 views

Does the block size of a symmetric cipher impact the security of the cipher itself? [duplicate]

Will a 128 bit block have some security implication in post-quantum cryptography?
0
votes
1answer
61 views

Can ECB be turned into a secure algorithm by adding obfuscation of the plaintext patterns?

Just to preface this I'm very new to cryptography. However, I've been reading that ECB should not be used under most circumstances due to its symmetry which allows attackers to gain information about ...
0
votes
1answer
51 views

silly possibly original AE construction

This idea is inspired by a recent question about sending 32 byte messages, encrypted, without a MAC but still achieving the equivalent protection of a MAC just by using a block cipher, extra ...
2
votes
2answers
202 views

Is it possible to determine the symmetric encryption method used by output size?

I'm attempting to identify the method of encryption for a black-box symmetric encryptor that produces blocks of output that are 4 bytes in length (e.g. small inputs fit in 16 bytes, then 20 bytes and ...
1
vote
1answer
162 views

How should the key schedule be designed for this general block cipher?

After looking at the Wikipedia page for the Fiestel cipher, I thought about making a variation of it that is very general. I basically followed the diagram on Wikipedia in order to structure the ...
0
votes
0answers
57 views

Is it safe to use ECB mode this way, w/o duplicate blocks?

I wanna make my own "way" of encrypting separate messages. And I want it to have the least possible size overhead while being completely encrypted (hide msg counter). Here's my current idea: we ...
1
vote
1answer
41 views

AES, CMAC and “3 pass authentication protocol” Explained

I am struggling a bit to understand how authentication systems are properly used in NFC tag environments so I'm posting this thread to clarify some concepts.(In advance, this is not my field, so ...
2
votes
2answers
62 views

Extract one unique SBox from Canonical Representative

In paper https://eprint.iacr.org/2011/218.pdf, the author has examined 16! different 4 bit SBoxes and at the end of investigation, introduced an optimal class which named "Golden SBoxes". How can I ...
1
vote
0answers
94 views

If the S-Box is given. How to calculate the affine transformation matrix?

Example using SAGE sage: sr = mq.SR(1, 1, 1, 8, gf2=True) sage: S = sr.sbox(); S (99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171, 118, 202, 130, 201, 125, 250, 89, 71, 240, ...
0
votes
2answers
54 views

Predicting value of E(k,0) for Block cipher with random and secret key

Some mode of operation of block ciphers rely on the fact that E(k,0) is an unpredictable value when k is random and secret (with 0 denoting the all-zero binary string). Why is this a reasonable ...
-2
votes
1answer
85 views

Where can I find some thought-provoking questions on the fundamentals of Cryptography? [closed]

The question might sound broad, allow me to explain. Cryptography is a diverse domain. I have been in Crypto research since last four years. Recently, one of my colleague got interviewed by an IT ...
1
vote
1answer
74 views

Application of MDS matrices in serial and round-based implementations

We know that MDS matrices are used in the diffusion layers of block ciphers. My question: what types of MDS matrices can be applied to serial or round-based implementations or both of them? I ...
1
vote
1answer
74 views

Security of a block cipher if double encryption $E_{K_2} \circ E_{K_1}$ is always single encryption $E_{f(K_1,K_2)}$

If there always existed a $k_3$ such that $\operatorname{DES}(k_2, \operatorname{DES}(k_1, M)) = \operatorname{DES}(k_3, M)$, how would that affect the security of $\operatorname{DES}$?
0
votes
1answer
105 views

Meet-in-the-middle probability of success

In page 358 of Bruce Schneier's Apllied Crypto, when explaining the meet-in-the-middle attack, he states that the success probability is «1 in $2^{2m - 2n}$» with two plaintext/ciphertext pairs, and «...
6
votes
1answer
95 views

Differential and Linear trail propagation in Noekeon

In the Noekeon Cipher Specification they write the following : The propagation through Lambda is denoted by $(a \rightarrow A)$, also called a step. Because of the linearity of Lambda it is fully ...
1
vote
0answers
33 views

Additive differential probability

I am studying about additive differential probability. And I show a paper that is V.Velichkov et al., The Additive Differential Probability of ARX. I have a question in chapter 5.2. V.Velichkov et ...
1
vote
1answer
40 views

How to calculate the number of Linearly active Sbox

I cant understand the concept of linearly active sbox. In the case of differential analysis it is more easy to understand the concept of 'active sbox' Also how the increase in number of (linearly) ...
-1
votes
2answers
107 views

Learning about Feistel Cipher

I'm learning about Feistel Ciphers at the moment, but having issues with the formulae, so I can't move on from it. Encryption: $𝐿𝐸_{𝑖+1} = 𝑅𝐸_𝑖$ $𝑅𝐸_{𝑖+1} = 𝐿𝐸_𝑖 \oplus 𝐹( 𝑅𝐸_𝑖 , 𝐾...
0
votes
2answers
114 views

Can block ciphers encrypt messages larger than the key length?

I am trying to learn some basic cryptography and I am reading some conflicting statements about block cipher. My current understanding is that we start with an XOR to obfuscate our data. We can then ...
4
votes
1answer
120 views

$\boxplus$- key addition vs $\oplus$- key addition

GOST cipher , Hight cipher and SEA cipher use key addition based on modular arithmetic addition (module key size $\boxplus$) compared to many ciphers which use arithmetic addition modulo 2 ( $\oplus$)....
2
votes
0answers
140 views

How can I determine the Hill cipher key in this case?

I have been struggling with a Hill cipher problem for many days, without any luck. I have the following ciphertext, which I know is an encrypted excerpt from an Edgar Allan Poe story: ...
0
votes
1answer
42 views

What is the purpose of multiple key addition layers in AES?

I understand the purpose of the SubBytes layer (confusion) and the ShiftRows and MixColumns layers (diffusion). But I don't see the purpose of having more than one key addition layer. What I've been ...
2
votes
3answers
85 views

Terminology: Is a block cipher in counter mode still considered a block cipher or is it classified as a stream cipher?

I'm confused about what terminology to use. I see people referring to such a cipher-MOO combination using both terms.
2
votes
1answer
68 views

The key size of an ideal block cipher

My understanding of an ideal block cipher is as follows: For a block cipher with block size $n$, there are $2^n$ possible plaintexts. The number of possible keys (mappings) would then be $2^n!$. ...
2
votes
0answers
62 views

Why commutativity gives an invariant subspace?

In A Generic Approach to Invariant Subspace Attacks the authors defined an invariant subspace as: $$F(u + A) = v + A$$ Where $F:\mathbb{F}_2^n \to \mathbb{F}_2^n$,$u, v \in \mathbb{F}_2^n$, and $A$ ...
-1
votes
2answers
90 views

Are all block and stream ciphers symmetric?

I'm trying to categorize my knowledge. Can I place block ciphers and stream ciphers under symmetric with RSA/DH under asymmetric?
0
votes
0answers
39 views

XORing with 1B in MixColumn transformations for AES encyption

In MixColumn transformations in AES encryption, do we have to Xor the shifted input with 1B only when the leftmost bit is high or is it like the number of times we shift it, and then when a one ...
1
vote
1answer
99 views

AES Diffusion at Block Level

AES provides diffusion at the block level by implementing the ShiftRows and MixColumn sublayers. The former permutes data on a byte level, wheres the latter combines blocks of four bytes. Can it ...
1
vote
1answer
59 views

Key, plaintext block and ciphertext block permutations question

Question: If a cipher’s key size is $k$ bits and its block size is $b$ bits, how many possible keys are there, how many possible plaintext blocks are there, and how many possible ciphertext blocks are ...
9
votes
1answer
387 views

Where would a “half round” come from?

In the hierocrypt-L3 description, the cipher takes 6, 7, or 8 rounds. Example source code also seems to follow this same specification of 8 rounds for 256-bit keys. Wikipedia shows 8.5 rounds for ...
3
votes
2answers
117 views

Lightweight block ciphers that support decryption with minimal overhead?

Lightweight block ciphers are mostly expressed for encryption routine and efforts are made to keep it as light as possible mostly in terms of gates count and power usage although some try to keep ...
1
vote
1answer
135 views

Encryption using matrix transformations

I have been thinking lately about a block cipher which takes a block of bits and arranges them in a square matrix. Then defining transforms on submatrices of the square matrix to scramble the bits. ...
1
vote
2answers
79 views

Implementations of GCM with 64-bit cipher

The paper The Galois/Counter Mode of Operation (GCM) describes mainly the 128-bit case, for use with 128-bit block ciphers such as AES. AES-GCM test vectors are available from NIST. The paper also ...
1
vote
1answer
103 views

To find nonlinear invariant of S box

I read a paper about a nonlinear invariant attack that is Y.Todo et. al's "Nonlinear Invariant Attack: Practical Attack on Full SCREAM, iSCREAM, and Midori64" In this paper's Appendix A., they said ...
0
votes
0answers
83 views

Combining stream cipher with block cipher for disk encryption

You take something like chacha20 and use the disk block # to seek it, xor it with the data block and then encrypt it with a block cipher in ECB mode. Would this be secure? Edit: To avoid getting ...
0
votes
1answer
87 views

What Feistel network block ciphers do not use data-dependent table lookups or modular additions?

I am looking for block cipher algorithms based on Feistel networks. The algorithm is required to not use data-dependent table lookups (or data-dependent rotations) or modular additions/multiplications....
0
votes
2answers
129 views

What characteristics define a function to be a block cipher

I'm trying to understand what characteristics or properties make the result of a function a block cipher. I understand that for a function to be a block cipher it has to be invertible and can't be a ...
0
votes
1answer
80 views

Encrypt twice with DES using same key ? $\operatorname{DES}(\operatorname{DES}(x,k), k)$

Does encrypting with $\operatorname{DES}$ in the following way $$\operatorname{DES}(\operatorname{DES}(x,k), k)$$ make $\operatorname{DES}$ as strong as $\operatorname{2DES}$ with 2 keys? Because we ...
1
vote
2answers
117 views

DES - encrypt 3 times - DES(DES(DES, k), k'), k) - stronger than 2DES with 2 different keys?

What if were to use DES in the following way: For a given plaintext x and key k we will perform: ...
2
votes
1answer
45 views

Padding schemes reversal and space efficiency

My crypto course proposes the following padding schemes: $\operatorname{pad}(m) = m \mathbin\| 0^i$ $\operatorname{pad}(m) = m \mathbin\| 10^i$ $\operatorname{pad}(m) = m \mathbin\| 0^i \mathbin\| E(\...
8
votes
1answer
251 views

AES and DES - reusing the same round keys

Both DES and AES use key expansion to generate the round keys (for Feistel network or for the AddRoundKey operation). Each round uses a different key. Why do we need that? Why we cannot use the same ...
1
vote
1answer
355 views

Encrypting text using Caeser cipher in CFB mode

I am interested in learning and understanding cryptography and its application in every day life. One thing I can't seem to get my head around is encrypting plaintext using a block mode such as CFB. I ...
1
vote
1answer
241 views

Known Plaintext Attack for Modified OFB Mode of Operation

Question: Assume a variant of the OFB mode by which we only feedback the 8 most significant bits of the cipher output. We use AES and fill the remaining 120 input bits to the cipher with 0's: Why is ...
4
votes
1answer
331 views

Known Plaintext Attack on Block Cipher in ECB and CBC Modes of Operations

These 2 similar questions are from Paar's Understanding Cryptography. I could not see the answer so if someone can help I will appreciate: Question1: We consider known plaintext attacks on block ...