Questions tagged [block-cipher]

A block cipher is an encryption algorithm which encrypts fixed-size blocks of plaintext to same-sized blocks of ciphertext. For good ciphers every bit of the ciphertext block depends on every bit of the plaintext block and every bit of the key.

Filter by
Sorted by
Tagged with
-1
votes
0answers
35 views

Guidelines to write a 'strong' block cipher with Crypto++

I need to implement a Block Cipher to encrypt a phrase. After many hours in research, I've found Crypto++ Library. Such a library has a Block Cipher almost ready for use with many options. My ...
0
votes
1answer
40 views

What will be appropriate AES padding characters?

I am completely noob in terms of cryptography and security. So I decided AES Cipher for encrypting my data. I pad my input data String with blank white spaces to fit it in multiples of my cipher ...
1
vote
1answer
34 views

A bit-sliced implementation (or the algebraic normal form) of the two FIDES S-Boxes

I want to see a bit-sliced implementation of 5-bit and 6-bit S-Boxes of FIDES or, at least, a representation of these two functions in algebraic normal form. Where can I find it?
-1
votes
0answers
19 views

Is ECB CPA Secure? [duplicate]

I am trying to prove on how ECB may not be CPA secure, i tried to google and also looked at similar links on stack exchange but couldn't find any
1
vote
1answer
61 views

How can AES-CCM behave as an AEAD stream cipher?

AESCCM- Couter with Cipher Block Chaining Message. As it uses cmac for generation for tag , which is internally aes-cbc (block cipher, need block size, may require padding) And Encryption is done ...
0
votes
0answers
34 views

Colliding input to compression function

So I recently started to look into cryptography and found the following question to cryptography scheme using $T = E_{S}(S \oplus M)$ It is said that this is not secure because you can have a ...
-1
votes
1answer
72 views

Block cipher mode of operator with counter as part of its key or message [closed]

Consider a block cipher (such as AES256) as $E$, a randomly selected key $k$, a counter $i$, and an array of n-bits $M$ as the message. Also consider the following block cipher modes of operations: $...
4
votes
3answers
184 views

How can frequency analysis be applied to modern ciphers?

I am building a computer program that deciphers Caesar, Vigenere and monoalphabetic substitution ciphers. All of those are susceptible to frequency analysis. However, it does not seem to be real-world ...
1
vote
0answers
39 views

Perfect Forward Secrecy Stream Cipher based on Block Cipher

I'm thinking about ways to encrypt an endless stream of data (e.g. a video or audio feed) in a way, where a compromise of the current internal state of the encryption (e.g. a RAM dump) does not ...
0
votes
0answers
42 views

Is there a name for encryption which relies on repetitive calculation (=time) instead of a key-value? (e.g. block chain, hash value, block cipher)

Many encryption problems are fast to solve if a key, factor, exponent or something similar is known. Other encryption methods don't have such keys. E.g. a hash value of another value. It's used ...
7
votes
3answers
1k views

Why is ECB+CTR not a thing?

AES-CTR is nice for its parallelizability and simplicity but if you duplicate an IV you reveal plaintext. Chaining modes like CFB and CBC don't have that problem per se but they are not ...
0
votes
0answers
23 views

Is there a 'chain-function' which allows computing the value for the index which is next, previous, +/- some constants but has no shortcut for other?

Looking for an algorithm which has a cyclic 'chain'-function which only allows the computation of next, previous element and in addition to that also a shift by a small amount of constants. Example 1 ...
0
votes
0answers
66 views

8 bit block cipher in CTR mode for practice - counter is 32 bits

I'm given a very simple 8 bit block cipher in which to encrypt plaintext x with k k one performs $ x \oplus k $. I am given IV = 0101 and a CTR of value CCCCCCCC (36bits). My understanding is that ...
0
votes
0answers
38 views

Do any block cipher encryption functions (or similar functions) exist which are associative to each other and cyclic?

Most block ciphers encrypt a plaintext deterministically into a ciphertext which allows decryption in the opposite direction. Now, instead of encrypting just one plaintext, I'm looking for a cyclic '...
1
vote
1answer
52 views

Block cipher linearity (in relation to hill ciphers)

So while I knew hill ciphers were a form of block cipher (I'm assuming all the ones I have solved to date were ECB or something similar), so that got me thinking. Is it possible to use hill ciphers in ...
10
votes
1answer
986 views

Which block cipher parameters should be kept secret?

Which of the parameters of a block cipher (e.g., algorithm name, mode of operation, IV (if any), key length) are essential to keep secret?
1
vote
1answer
52 views

Attacking Double DES (OFB Mode) given the initialization vector and not much else? [closed]

I'm given a Plaintext/Ciphertext pair, a Ciphertext to break, and the IV. One thing of note is that the same IV is used for both DES Encryptions, so $$C = E_{K_2}(E_{K_1}(P, IV), IV)$$ I have limited ...
0
votes
0answers
58 views

Do there exist cryptographic algorithms where the “core” function is 96-to-32-bit?

There exists a FOX family of block ciphers (Wikipedia article: IDEA NXT). This cipher uses a function called "f32" which operates on three 32-bit words and outputs one 32-bit word. This function ...
1
vote
0answers
33 views

Are slide attacks effective if the primitive is sandwiched? And key schedule vs. Even-Mansour

Suppose you have a cryptographic permutation consisting of identical rounds, that makes it vulnerable to a slide attack. But if you sandwich it between two XORs of key material. Is it still vulnerable?...
5
votes
2answers
1k views

Why does error propagation in CBC mode encryption affect two blocks?

From Wikipedia: Error propagation It was common to discuss the "error propagation" properties as a selection criterion for a mode of operation. It might be observed, for example, that a one-...
5
votes
1answer
117 views

Are any block ciphers provably free of equivalent keys?

There are $2^n!$ possible permutations of an $n$-bit block cipher $E_k:\{0,1\}^n \rightarrow \{0,1\}^n$, and any given key $k$ selects one of these permutations at random. Define equivalent keys as a ...
3
votes
3answers
367 views

What security risks does exposing the size of the plaintext entail?

For this question my focus is exclusively on symmetric block ciphers (with a particular interest in AES256 in CBC mode). I have read much discussion on various ways to pad the plaintext so that the ...
0
votes
1answer
74 views

How can padding be disambiguated from data, when encrypting using a block cipher?

How can padding be disambiguated from data, when encrypting using a block cipher? I'm by no means an expert in cryptography, but rather a programmer with a keen interest. Suppose, I've ...
2
votes
1answer
22 views

key recovery in the ideal cipher model

I'm reading up on the ideal cipher model and can't wrap my head around some basic calculation. Let $E$ is an ideal cipher with $n$-bit key and $n$-bit block. For each key $K$, $E_K$ is random ...
1
vote
0answers
39 views

How TAU function of SM4ni cipher is implemented?

I am trying to understand the SIMD implementation of TAU function of SM4 which is as follows: ...
1
vote
2answers
63 views

Very short block ciphers for equally-short plaintexts

I'm trying to develop an encryption technique for encrypting short phrases (such as reversibly-anonymized names) in text. The key-generation and ciphertext-representation details are fungible, but ...
2
votes
1answer
115 views

How many required known plaintexts for an attack are considered insecure?

I stumbled over this problem when looking at symmetrical block ciphers with a relatively small block size like 32 bit. When I was looking at more common block ciphers with a 64 bit, I learned that ...
0
votes
0answers
43 views

Encryption of 7 byte of data, output must be 7 byte [duplicate]

I'm looking for a cryptographic algorithm that inputs and outputs are both 7 bytes. Is there any such algorithm?
4
votes
2answers
113 views

What are the issues of look-up table based implementations?

Cryptographic libraries mostly use pre-computed lookup tables to implement block ciphers. These lookup tables require large amout of memory and a series of cache miss/hit makes them vulnerable to ...
1
vote
1answer
43 views

Simplifying Meet-In-The-Middle Attacks

Considering the fact that a block cipher is a bijective function on the set of possible plaintexts, if one views the encryption of a datum with a key $K_2$, which has been already encrypted with the ...
1
vote
2answers
110 views

Is the following s-box more linear or more non-linear?

I am trying to figure out whether the following simple s-box configuration I created is more linear than non-linear or vice versa more non-linear than linear? The parameters for this 16*4 table of ...
0
votes
1answer
86 views

Why Stream Ciphers can be slower in software than Block Ciphers

I made some tests on virtual environment (Virtual Box) using StrongSwan, a VPN based on IPSec. I had latency results using ping command saying that Chacha20 (stream cipher) had poor performance ...
5
votes
2answers
181 views

Is it possible to perform a meet-in-the-middle within a block cipher?

Standard meet-in-the-middle explanations show that you can perform a meet-in-the-middle attack on a repeated block cipher such as double-DES (performing DES twice in a row). However, block ciphers ...
1
vote
1answer
137 views

Why does a padding block exist for ECB and CBC modes?

In ECB and CBC mode, the size of cipher text is more than the plain-text size by one padding block. From what I read, ECB does a simple encryption to each 64 bit block of a Plain text, and produces ...
4
votes
0answers
93 views

Aside from Keccak, are there any keyed/unkeyed permutations where the choice of all rotation constants is not based on heuristic methods?

I am interested to see examples of cryptographic algorithms (namely, keyed or unkeyed permutations that transform an $n$-bit input to an $n$-bit output) where the choice of all rotation values is not ...
2
votes
3answers
494 views

What happens if you increment MAX counter in AES-CTR?

Suppose you use a IV/counter = ffffffffffffffffffffffffffffffffin AES-CTR. What will happen if you encrypt the next block, and thereby increment the counter by one? ...
2
votes
1answer
70 views

Block cipher information leakage using same key

This is from a previous exam question and I'm not really sure how to approach this properly We're using a block-cipher mode that encrypts $C_i$ = $E_k$ ($P_i$ $\oplus$ $C_{i-1}$ $\oplus$ $P_{...
0
votes
0answers
43 views

Meet-in-the-middle attack (different block cipher modes)

Does a meet-in-the-middle attack on depend on the used modes for block ciphers? encryption: $C_i$ = $D_{K2}$($D_{K1}$($E_{K1}$($P_i$ $\oplus$ $C''_{i-1}$))) $\oplus$ $C'_{i-1}$ and $IV_1$ = $C''_0$ = ...
0
votes
1answer
64 views

Block Cipher CTR mode when offset is not known by receiver

When an encrypted message is received, it can be easily decrypted if the offset (=counter) of the received message is known (and also the required private key of course). This allows for random access ...
0
votes
0answers
33 views

Bit based Division Property of AES MixColumn

I'm studying about division property that is proposed by todo et al. I have a question about division property for AES mixcolumn. In bit based division property, how can I calculate output division ...
2
votes
1answer
124 views

Where can I find test vectors for the PRESENT cipher with a 128-bit key?

Where can I find the test vectors for the PRESENT block cipher with a 128-bit key?
4
votes
2answers
148 views

Is there a maximum amount of data which can be encrypted using a symmetric (AES256) key?

I am working on an application where we will be encrypting billions of small (< 2,000 bytes) records. Combined, we are facing many TB of data. Each record will be encrypted independently, using a ...
1
vote
1answer
188 views

Help understanding how to decrypt cipher

I am trying to create a padding oracle attack to decrypt a cipher that is encrypted with cbc and PKCS#7 padding. My first step is just to try and decrypt the second block. I have read a lot about it,...
0
votes
1answer
49 views

Determine whether nonlinear boolean function is balanced or not

Is there any way to check that a nonlinear boolean function is balanced or not? I can't think any other way except to check all input variables.
4
votes
1answer
280 views

What are the advantages of SM3 and SM4 compared to NIST-approved algorithms (SHA3 and AES)

Armv8.4-A will add extended support for more cryptographic primitives, to include SM3, which is a cryptographic hash function used in the Chinese National Standard; and SM4, a 128-bit block cipher; ...
1
vote
2answers
230 views

What are the implications of XORing ciphertext with plaintext?

I was intrigued by this question: Does adding complexity mean a more secure cipher? And it led me to wonder: What are the implications (if any) of XORing a ciphertext with the original plaintext ...
0
votes
0answers
43 views

System equations for S-boxes

I`m on searching of any method of building system equations for S-boxes. Firstly, I just cannot undestand exact meaning of "system equations", is it anf for each input (I know how to make it using ...
3
votes
1answer
104 views

Does the block size of a symmetric cipher impact the security of the cipher itself? [duplicate]

Will a 128 bit block have some security implication in post-quantum cryptography?
0
votes
1answer
69 views

Can ECB be turned into a secure algorithm by adding obfuscation of the plaintext patterns?

Just to preface this I'm very new to cryptography. However, I've been reading that ECB should not be used under most circumstances due to its symmetry which allows attackers to gain information about ...
0
votes
1answer
67 views

silly possibly original AE construction

This idea is inspired by a recent question about sending 32 byte messages, encrypted, without a MAC but still achieving the equivalent protection of a MAC just by using a block cipher, extra ...