Questions tagged [block-cipher]

A block cipher is an encryption algorithm which encrypts fixed-size blocks of plaintext to same-sized blocks of ciphertext. For good ciphers every bit of the ciphertext block depends on every bit of the plaintext block and every bit of the key.

Filter by
Sorted by
Tagged with
0
votes
1answer
22 views

AES plaintext is smaller than 128 bits

I'm currently developing a AES implementation in a graduation project at university. As far as I know, AES uses a 128 bit block length as input . if the entered string to encrypt is not 128 bits such ...
1
vote
1answer
463 views

How does using a really small block size reduce the key space?

I read this online and was confused: Modern block ciphers tend to have block sizes of 128 bits or larger, because if the block size is too small there is the same problem as a small key space as ...
3
votes
1answer
64 views

Number of plaintext–ciphertext pairs needed to rule out false keys with a reasonable likelihood in AES

I am new to cryptography and I've got the following question from Understanding Cryptography: Imagine that aliens — rather than abducting earthlings and performing strange experiments on them — drop a ...
1
vote
1answer
52 views

1:1 algorithmic shuffle of massive numerical space

For a personal project I'm currently tinkering on, I'm looking for a function which has the following properties: For any number X in the range 0..MAX, there is a 1:1 random mapping with another ...
1
vote
0answers
49 views

Proving Security of a Tweakable Block Cipher in CBC Mode (Threefish)

I want to prove the security of a Tweakable Block Cipher in CBC Mode How does one prove the security of a Tweakable block cipher (ie Threefish) in CBC mode with a random IV and a constant (public) ...
2
votes
0answers
35 views

LibTomCrypt Documentation on LRW Mode/Tweakable Block Cipher - Apparent Contradiction?

In the LRW mode discussion on page 34/161 of the LibTomCrypt manual, available here for example https://opensource.apple.com/source/CommonCrypto/CommonCrypto-55010/Source/libtomcrypt/doc/...
1
vote
1answer
58 views

Listing first 8 bits generated by LFSR

Consider the primitive polynomial P(x) = x^4 + x^3 + 1, initialized with the bit string (shifting occurs from left to right, were the right-most bit represents the LFSR output): 1101. List the first 8-...
0
votes
1answer
34 views

IND-CCA insecurity of modified CBC encrypt + MAC scheme

I've been puzzling over the following proof for the past couple of days. Since a block cipher in CBC mode can be used to build both an IND-CPA secure encryption scheme and a EUF-CMA secure block, a ...
0
votes
1answer
53 views

Finding Multiplicative Inverse In Field

Consider the finite set Z_257 of non-negative integers less than 257. The number 257 is a prime, so Z_257 forms a field with addition and multiplication mod 257. How can I use the Extended Euclidean ...
0
votes
0answers
38 views

OpenSSL DES encryption for KCV calculation

I'm trying to implement a simple command-line tool to calculate the (Key Check Value) KCV of some encryption keys. The algorithm for the KCV is simply to encrypt a block of 8 zeros with DES and get ...
2
votes
2answers
68 views

Question on the CPA-security proof of the CTR-Mode

While reading Katz & Lindell's textbook (2nd edition) I found a proof for the CPA-Security of CTR-Mode. It can be found at the end of chapter 3.6.2 (page 93 and 94). I don't quite understand, why ...
3
votes
1answer
67 views

Backdoor Designer Key Recovery in LowMC-M

The paper https://eprint.iacr.org/2020/986.pdf proposed a framework for embedding a malicious backdoor in LowMC cipher, that will later help the designer to recover the secret key in the known-...
2
votes
0answers
55 views

Is there any way to encrypt the path in between a small number of 3D positions?

Or more general: given two valid random cipher $c_0, c_1$ a function $D$ with $$D(c_0,c_1) = (a,b,c)$$ should exist but hard to compute (for most cases). The result $(a,b,c)$ represents the path from $...
1
vote
2answers
98 views

Hashes as mutually independent keys

For cascading encryption (ie. AES-Twofish-Serpent), the most secure implementation is with mutually independent keys. My question is if it is secure to hash the previous key for each layer of ...
1
vote
1answer
62 views

Is AES strictly speaking a SP network?

Forgive me if this seems like a trivial question. I've read that AES is a SP network. However, when reading about P-boxes in SPNs they say that they simply shuffle bits around. In AES the ShiftRows ...
0
votes
0answers
33 views

nonlinearity and autocorrelation of common s-boxes

I cannot find publications comparing the properties of popular cipher s-boxes. First of all, I am interested in nonlinearity and autocorrelation of s-boxes, which are used in seed, cast-128, camellia ...
0
votes
1answer
32 views

Can we design a block cipher based on SP-network without loss of E/D similarity theoretically?

I understand what SP-network (Substitution-Permutation Network) and Feistel Network look like. And those ciphers based on Feistel (e.g. DES) often achieve so called E/D similarity, which indicates ...
2
votes
1answer
61 views

Is there any block-cipher, format-preserving or similar encryption method with known cycle size? (without short-cut, with known source/runtime vars)

E.g. given a $n$-bit message $m_0$ and an encryption function $f$ After applying the function $c$ times it will result in $m_0$ again. $f^1(m_0) = f(m_0) = m_1$ $f^2(m_0) = f(f(m_0)) = f(m_1) = m_2$ .....
0
votes
1answer
40 views

Can a broken cipher reveal the key?

Suppose I cascade cipher A and cipher B to encrypt a message. Both ciphers use the same key. I know that theoretically, the security of the setup when used correctly is at least as secure as the most ...
3
votes
2answers
489 views

AES-CBC decrypts to wrong output?

Someone I know showed this to me, and I can't put a finger to why it's happening. Am I missing something? They encrypt the text, and the output is really guessable. $u\to t$, $i\to h$ (it's one letter ...
4
votes
1answer
103 views

Division property table of SBox

In Table 12 (page 23) of the GIFT paper, the "Division property" table is given. I could not understand how it has been computed. My questions: May I have an algorithm on how to compute the ...
1
vote
1answer
44 views

Where is the SIV in AES-GCM-SIV?

This is my understanding of Synthentic IVs You have 2 keys $K_1$ & $K_2$. $F$ is a PRF Instead of choosing a separate IV, you instead generate the IV from the PlainText. $IV = F(K_1, m)$ $c = E(...
2
votes
3answers
148 views

Can anyone explain to me the difference between the OTP (one-time pad) and Vernam Cipher?

I heard they are very similar, although there are subtle differences between the two.
0
votes
0answers
241 views

Is ECB mode more suitable than CBC mode while encrypting a long bit string?

I know that ECB is less secure than CBC, but will it be suitable for encrypting a long bit string?
1
vote
2answers
41 views

Decryption formula of Plaintext Block Chaining (PBC) mode of a block cipher

Considering that $C_n = E_k(M_n) \oplus M_{n-1}$ formula is used in encryption side of this mode of block cipher, and knowing that instead of M0 a randomly chosen initialization vector (IV) is used in ...
1
vote
1answer
29 views

How are keys mapped to cipher texts in block ciphers with large block sizes?

What I understand so far: For n-bit block size, there are 2n plaintexts (P) there are P! possible keys The bits necessary to represent each of the possible mappings is log2(P!) rounded up Basically, ...
2
votes
1answer
68 views

How are SHACAL-2 ciphers calculated?

I am trying to learn about the underlying functionality of the different hash functions (currently SHA) and I'm pretty stuck even after watching a Stanford video about it. One method of hashing is by ...
9
votes
0answers
185 views

How many additions modulo $2^k$ and multiplications in $\mathbb F_{2^k}$ are needed to resist cryptanalysis?

Consider a $k$-bit block cipher with $r$ rounds, and key composed of $r$ subkeys $K_i\in\{0,1\}^k-\{0^k\}$ (that is, non-zero $k$-bit bitstrings), for $i\in[0,r)$. Plaintext is $P=S_0\in\{0,1\}^k$, ...
0
votes
0answers
38 views

Looking for encryption function given decryption function (2048-bit ciphertext and key, addition and subtraction operations)

I have a decryption algorithm for 256-byte (2048-bit) blocks and want to find the matching encryption algorithm. What I know about the algorithm and have: 256-byte ciphertext (I have multiple ...
12
votes
2answers
4k views

Why don't we use Blowfish if it hasn't been cracked?

Since Blowfish is old, well-audited, and has no published attacks, why are we using AES instead? I know that Bruce Schneier said that Blowfish is insecure and told people to transition to Twofish, but ...
0
votes
0answers
68 views

Mathematical and empirical analysis of AES

Hello everyone and happy new year in advance. I'm doing a work about the analysis of the AES algorithm, and I have some doubts about this. First, I need to do the mathematical analysis of the ...
1
vote
0answers
33 views

How is it possible to prove that Shanon entropy does not change applying any bijective function to X? [duplicate]

I was wondering how is it possible to mathematically prove that Shannon entropy does not change when applying any bijective function to X? For instance H(X) = H(f(X)) assuming that f is invertible and ...
1
vote
0answers
48 views

Usage of block and stream ciphers

I see that in many applications stream ciphers are common than block cipher - whether is Salsa20, AES-GCM, etc. In which cases would a stream cipher be preferred over a block cipher and vice versa? ...
1
vote
2answers
200 views

Stream cipher and block cipher usage in network data encryption

Stream ciphers are usually used for streaming data encryption, such as voice, and also for low layers data encryption. For example, MACSec uses AES-GCM encryption. In L3 ad L4 security protocols (...
2
votes
1answer
34 views

How do salt and initialization vector differ?

Reading through the NodeJS API docs I came across IV for the first time. From what I can tell it has the same role as a salt in password hashing? Are they equivalent?
3
votes
1answer
171 views

CMAC - how is ambiguity resolved?

To avoid the dummy padding block, CMAC uses 2 separate keys K1 & K2. If padding is required, the final block is padded & then XORed with K1. If no padding is required, then it's XORed with K2. ...
2
votes
1answer
147 views

Which block ciphers are considered staples for constructing hash functions?

I've been looking all over the internet for an answer, and I must not know how to search because I've been really surprised that I haven't been able to find one. I'd also love to know what makes a ...
0
votes
1answer
78 views

Unconditionally secure block cipher for a finite number of blocks

I am wondering if someone can point me toward a block cipher that provides unconditional security for only a bounded number of encryptions. For example, you can encrypt $h > 1$ length $n>1$ ...
1
vote
1answer
80 views

Are there any tools to analyze cryptographic algorithms performance?

How can I analyze a cryptographic algorithm performance to make a table and charts comparing them. I have seen several papers but there's no paper explaining how it is exactly done. As comparing data ...
1
vote
1answer
62 views

Deterministic Counter Mode with a PRF. What does evaluate at a point mean?

This is from Dan Boneh's Lecture where he talks about operating a PRF (AES, DES) in Deterministic Counter Mode. Dan Boneh says What we could do is we could use what's called a deterministic counter ...
3
votes
2answers
154 views

Do Korea and Japan have their own national hashing standard?

I know China has SM3 and SM4 commercial cryptographic hash and block cipher standards, and I know Japan has Camellia block cipher and Korea has SEED. Do Japan and Korea have an industry standard for ...
0
votes
2answers
143 views

Encrypt a big file in blocks with AES-GCM: how many nonce do we need?

I need to encrypt big files using AES-GCM, potentially 10 GB or more. For memory (RAM) reasons, I need to processs them by blocks (let's say 16 MB), rather than doing ...
3
votes
2answers
160 views

Probability of false positive key matching two plaintext/ciphertext pairs

Given a keyspace of $ 2^{80} $ and plaintext space of $2^{64}$. And two plaintext and ciphertext pairs $(x_1, y_1)$ , $(x_2, y_2)$. Now we have $2^{80}/2^{64} = 2^{16}$ keys that encrypt $x_1$ to $y_1$...
0
votes
0answers
36 views

Brute force attack on a block cipher with length n [duplicate]

Consider a block cipher whose block length is 𝑛. 𝑁 = 2𝑛 is number of possibilities. Imagine we have 𝑡 plain text-cipher text pairs { 𝑃𝑖, 𝐶𝑖 = 𝐸𝐾(𝑃𝑖) } , where the key 𝐾 selects one of ...
0
votes
1answer
75 views

The modes of encryption that preserve the format

Can anyone give me some documentation on the various format preserving encryption modes?
0
votes
0answers
42 views

Symmetric Crypto Primitives derived from Rijndael Block Cipher

Rijndael Block Cipher supports multiple block/ key lengths and a subset of these was selected as AES. What other cryptographic primitives are derived from Rijndael or make use of its round function/ ...
0
votes
0answers
40 views

Avalanche effect SBOX

It is possible to achieve the avalanche effect in an SPN or in a Feistel network that use a single round of an SPN in his function (like DES) using SBOX that receive 2 bit in input and output 2 bit?
1
vote
1answer
48 views

Block cipher swap key and message

Say I use AES. If I insert the message the way the key normally is used and vice-versa, would this be equivalent secure to the intended encryption?
9
votes
1answer
2k views

Formally, what is AES?

AES is supposed to be a symmetric key block cipher. The theoretical counterpart to this is a pseudorandom permutation. I'd like to say that AES is a PRP (well, supposedly at least), but that doesn't ...
3
votes
1answer
112 views

Block Cipher Mode of Operations

I am studying for a test and I don't seem to understand the Block Cipher and its different modes of operations especially when it comes to encrypting and decryption. Could anyone please help solve ...

1
2 3 4 5
19