Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [blowfish]

Blowfish is an encryption algorithm that can be used as a replacement for the DES or IDEA algorithms. Blowfish was designed in 1993 by Bruce Schneier as an alternative to existing encryption algorithms. Designed with 32-bit instruction processors in mind, it is significantly faster than DES. Since its origin, it has been analyzed considerably. Blowfish is unpatented, license-free, and available free for all uses.

3
votes
1answer
86 views

Blowfish padding

I'm currently reverse engineering a binary that uses Blowfish. A sample input would be: 08 00 01 00 1C FB 19 00 When this data is encrypted and then decrypted, I ...
1
vote
1answer
66 views

Cutting down the size of a long blowfish key

I am reverse engineering a software that uses blowfish for encryption. The target uses an implementation of blowfish that allows arbitrary positive key length with a key size larger than 56 bytes. I ...
0
votes
1answer
72 views

Are collisions possible on the output of Blowfish?

I'm using the Blowfish block cipher to encrypt messages of 64 bit without using any block cipher mode of operation. Can I still have a collision? I'm asking this to understand if Blowfish is ...
-2
votes
1answer
126 views

Why does Blowfish and RC4 (Arc4) make same encrypted strings [closed]

I made a program on android. I used a password key of "PBKDF2WithHmacSHA1" for both of them as a key. The program i made was using Android java Cipher library. When I encrypt and decrypt with blowfish ...
0
votes
1answer
592 views

Will using a 32 character key for Blowfish make it a 32 bit encryption?

I am sorry if it sounds naive but I have been searching and searching regarding what kind of encryption we end up with if we use a key of length 32 characters? This article https://www.embedded.com/...
0
votes
1answer
280 views

Blowfish-448 Secure Key Generation Algorithm

I am using blowfish-448, until now the keys have been generated using a crypto random number generator full filling the 448bits vector. I read about exploit in case of weak keys and reflection keys ...
1
vote
1answer
179 views

Is ciphertext stealing important in relation to Blowfish?

I am writing a simple messenger (as a proof of concept not for production), and I came across Blowfish as being as being an interesting alternative to AES. As it is not meant to be an actual ...
0
votes
1answer
142 views

Need help with padding

I'm programming a file encryption software based on blowfish (which uses 64bit blocks). I will need a mechanism for padding, but I'm not sure how to implement that properly. All of the approaches I've ...
1
vote
1answer
314 views

Blowfish, Sboxes and the digits of PI, and the P_Array

I am trying to use the Blowfish algorithm, however, I am trying to understand SBoxes that were used in the algorithm. I saw that it uses the hex digits of PI. I looked around in the web and found some ...
2
votes
1answer
158 views

Relation between encryption algorithms and (password) hash functions

This is a really basic question. Blowfish is not seen as a secure cipher. but bcrypt is one of the most secure hash functions. So first: How can a hash function be based on an encryption algorithm, ...
2
votes
1answer
170 views

64 bits cipher and birthday boundaries in ECB

I am using a 64 bits symmetric ciphers (blowfish), to encrypt a plain block using ECB. The plaintext is always 64 bits long, but due to some limitations I have to use the same key (448 bits long) ...
5
votes
1answer
825 views

Remove Blowfish Padding

I am currently experimenting with the Blowfish encryption. I noticed that the decrypted message and the original message doesn't have the same length. This applies for the ECB, CBC and CTR mode. The ...
1
vote
1answer
652 views

Recovery of blowfish encryption key?

Is it possible to recover key used for blowfish encryption, if I have encoded and decoded string as well as initialization vector tables (bfp and ks0-3)? I don't know the length of the key.
1
vote
0answers
523 views

How long does it take to brute force Blowfish-448?

I am conducting an investigation on the efficiency of AES and Blowfish with regards to memory when encrypting data of varying sizes. I open my essay with an introduction as to what encryption is and ...
4
votes
4answers
11k views

What encryption should I use: Blowfish, Twofish, or Threefish?

The title of this thread pretty much sums up what I'm asking: what is the best encryption to use out of the three — Blowfish, Twofish, or Threefish?
1
vote
4answers
672 views

Implementing symmetric encryption algorithms with whole words

UPDATE: After farther research Ive come to the understanding that this question is more misleading then helpful. The question ask about encryption but directs to obfuscation (and so the answers). I ...
0
votes
1answer
649 views

How to create the right Blowfish padding? [closed]

I use the OpenSSL library for Blowfish encryption in ecb mode. The message are encrypted, but with the wrong padding, because of it I have a problems with decryption. What am I doing wrong? I checked ...
0
votes
1answer
190 views

Does the Blowfish cipher work with OFB mode?

I'm trying to implement the Blowfish cipher in Output Feedback mode. OFB mode has two operations, XOR and the block cipher. XOR inputs two blocks of the same length and outputs one block of the same ...
2
votes
1answer
1k views

Decrypting a blowfish cipher with three keys

Disclaimer: I'm pretty new to cryptography and I don't have a strong mathematical background. I apologize in advance if I missed something blatantly obvious. I participated in a security CTF this ...
4
votes
0answers
257 views

What is the correct definition of the blowfish F-function? [closed]

The Blowfish cipher uses a so called F-function which uses S-Boxes (S[i], i=0,1,2,3) to ...
1
vote
1answer
2k views

S boxes in Blowfish

I know how the s-boxes in blowfish are initialized, but how is the output sorted, I mean which bit from the input goes where in the box ? and what do mean they have 256 entries if they are 32-bit S-...
2
votes
1answer
65 views

How to force non-negative int64_t output for blowfish encryption with int32_t input?

I would like to encrypt a series of small integers one by one. The range of them is about 0~10^8. The output must be non-negative int64_t integers. Since Blowfish is 64-bit cipher, I prefer to use it ...
1
vote
1answer
327 views

Which ECB ciphertext stealing scheme is this?

I am stuck with identifying ciphertext stealing method with the following properties: mode of operation is ECB; recommended padding scheme for this application is PKCS#7, but apparently it is not ...
3
votes
1answer
692 views

Blowfish Weak keys

I've read about the weak key issue with Blowfish, but can't seem to find anything that explains the practical effect of weak keys on Blowfish with the full 16 rounds. Is there any actual attack upon ...
5
votes
4answers
823 views

Which symmetric cipher is best for studying? [closed]

I would like to study a modern symmetric cipher (I have never studied a cipher before) and I was wondering which would be the best cipher for studying purposes of the following: AES (Rijndael), ...
0
votes
1answer
2k views

Why exactly Blowfish max key length is 448

Could anyone, please, tell me history of birth of Blowfish algorithm? Specifically, what is substantiation of Blowfish key length to be in range from 32 till 448 bits? Why, for example, it wasn't 64-...
2
votes
1answer
4k views

How does the Blowfish algorithm key initialization work

I'm having some trouble understanding the Blowfish encryption algorithm. From the Wikipedia article... The secret key is then, byte by byte, cycling the key if necessary, XORed with all the P-...
1
vote
1answer
982 views

Blowfish ECB mode: Tools for known-plaintext attack?

I'm currently dealing with multiple blowfish-encrypted files that share the same key. All are encrypted using ECB mode judging from their appearance: I don't know what the key is but I know 64 ...
0
votes
1answer
2k views

blowfish ecb with openssl doesn't give the expected result

I do the following via the Linux CLI: ...
1
vote
1answer
672 views

How does Blowfish avoid successful cryptanalysis? [closed]

I have researched the Blowfish algorithm and am curious as to why there exists no effective cryptanalysis for this algorithm as of yet. What basic principles or features allow Blowfish to achieve ...
5
votes
2answers
717 views

Is my id obfuscation algorithm secure?

I'm designing an id obfuscation system. My system includes: Embedded chips, each chip has a unique 32-bit address (id). Server Insecure low-bandwidth unstable one-way channels from the chips to the ...
2
votes
0answers
237 views

Blowfish vs. Twofish regarding power consumption

If I wanted to use Blowfish or Twofish to provide security on a device where power consumption is crucial. Regarding power consumption, which one would win? Generally, which algorithms are known to ...
5
votes
2answers
218 views

Is it possible to construct a secure block cipher of size $2n$ given a secure block cipher of size $n$?

Given, say, the Blowfish block cipher, which is considered secure but only has a 64-bit block size, can we construct a secure block cipher of 128-bit block size? Say we run the key through two KDFs, ...
8
votes
2answers
2k views

How do decryption algorithms determine whether your attempted passphrase is correct?

Judging by the algorithm on the Blowfish Wikipedia article, there is no way for the process to fail with an error. How then does GnuPG know when to tell you your password is correct when decrypting a ...
2
votes
1answer
773 views

Rainbow tables and blowfish

I'm thinking of implementing rainbow tables for a specific blowfish problem, but I have trouble thinking of the proper way to apply the original paper (and its application to hash functions) to ...
3
votes
1answer
233 views

How would using only one s-box affect security of Blowfish?

Schneier says: Fewer and smaller S-boxes. It may be possible to reduce the number of S-boxes from four to one. Additionally, it may be possible to overlap entries in a single S-box: entry 0 ...
4
votes
2answers
749 views

Random session key + predictable IV

I'm using Blowfish in a toy Diffie-Hellman communications scheme. Random session keys are generated for each connection. In this case I can simply feed a null array to the IV right? The same ...
9
votes
2answers
1k views

Is the 64-bit blocksize a fatal issue when encrypting TBs of data with Blowfish CBC?

Crashplan uses 448-bit Blowfish to encrypt the data you send them. The mode used is CBC, keys are multiple use, and IVs are generated with SecureRandom from JCE. Keys are not derived from the password,...
7
votes
2answers
588 views

Is using EAX mode with a 64-bit block cipher a bad idea?

EAX mode produces an authentication tag no longer than the length of the underlying cipher's blocksize. So in the case of using Blowfish (a 64-bit block cipher) in EAX mode, the resulting tag would ...
17
votes
1answer
16k views

Why exactly is Blowfish faster than AES?

I've not been able to understand exactly the reason behind Blowfish being faster than AES. Is it dependent on the block size? Or is it processor dependent? (if Yes, then lets assume that AES ...
3
votes
2answers
3k views

Known-plaintext attack on Blowfish in ECB mode

The protection scheme I faced recently seems so weak nowadays that a simple exhaustive key search would be enough to recover the user key in an acceptable amount of time (it's OK, since almost no ...
4
votes
1answer
710 views

Understanding a Blowfish cryptanalysis

I'm reading a cryptanalysis on Blowfish, and I've come across something that I don't quite get. Let's denote $$\delta = a \oplus a'$$ where a and a' are bytes that cause a collision in some S-box ...
2
votes
1answer
2k views

Hashing a password with SHA256 on the client then bcrypt on the server

I'm trying to implement a cryptographically secured storage site (not Mega, or anything similar) and am trying to prevent the user's password from ever touching the server. The password is used to ...
4
votes
1answer
14k views

AES vs Blowfish taking key-length into account

I understand that Blowfish is getting old, but is still a secure algorithm, and that AES is very popular, and is recommended by most people. My question is, how do the two compare when a 256-bit key ...
1
vote
1answer
3k views

Blowfish: hex digits of pi used for s-boxes?

Preface: here is the official site for the Blowfish algorithm: http://www.schneier.com/blowfish.html The Blowfish algorithm uses an s-box, which consists of hex digits of pi (found here: http://www....
1
vote
1answer
531 views

Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?

Suppose I have to use 64-bit keys for encryption (e.g. to comply with export restrictions). For this question, assume this key is truly random, and the encryption algorithm is Blowfish. Blowfish key ...
1
vote
1answer
493 views

Blowfish Encryptions in Bcrypt hashing algorithm

I am trying to understand the ExpandKey function used in the bcrypt hashing algorithm. As per the documentation of bcrypt hashing algorithm on USENIX here: http://static.usenix.org/event/usenix99/...
10
votes
3answers
12k views

Is Blowfish strong enough for VPN encryption?

I'm looking at an OpenVPN connection between two sites configured to use 128 bit Blowfish in CBC mode, and trying to figure out how to assess the strength, but I just don't know enough of the maths. ...
12
votes
1answer
561 views

Can one efficiently iterate valid bcrypt hash output values?

bcrypt is an intentionally slow hash algorithm. In my last protocol idea, I wanted to use it to expand a password and then only transfer the bcrypt-hashed password. An efficient attack on this would ...