Questions tagged [cryptanalysis]

Analysis of individual security aspects of a cipher or algorithm, not the security of a cipher or algorithm in general (which would lean towards “algorithm-design”).

Filter by
Sorted by
Tagged with
-2
votes
0answers
77 views

post quantum cryptography

I am curious to calculate how well some encryption algorithms standup to quantum computers. Asymmetric cryptographic algorithms are vulnerable to compromise by known quantum algorithms, specifically ...
-1
votes
0answers
28 views

Need help in exercises about Computational indistinguishability? [closed]

Anyone could help or explain how to? How to prove that dt(D,D') that is a distance? How to calculate the computation distance?
0
votes
0answers
54 views

Triple encryption with three separate keys, cascading vs. interweaving

When performing triple encryption using three separate keys, how have cascading vs. interweaving stacked up against each other in cryptoanalysis? Most of the references to triple encryption I see seem ...
7
votes
3answers
1k views

Will cryptanalysis always stay a relevant topic?

I hope this doesn't look like a silly question. In an age where our current cryptography is often impossible to crack when properly implemented and used, would we be able to decipher anything, for ...
0
votes
2answers
86 views

Reusing encrypted message on MITM attack?

I'm using RSA public key private key for sending AES key from each client to server application. then i'm using this AES key and IV for communicating between client and server. what should i do for ...
1
vote
1answer
65 views

Disrupting MITM attack against 3DES by intermingling plaintext and inter-mediate ciphertext between rounds

Let's say someone implements 3DES with three separate 56-bit keys and an attacker is attempting to execute a MITM attack. Here is the encryption plan designed to attempt to disrupt the MITM attack, or ...
3
votes
1answer
185 views

AES-CTR security if S-boxes substituion is omitted?

I understand why s-boxes are needed in general especially when ECB mode is used(because of using the same key for encryption of other blocks)but I wonder if it's ...
0
votes
1answer
38 views

Why would you want to keep the Initialization Vectors Public?

So I was researching Initialization Vectors (IV) and even took a look at this thread... What is the main difference between a key, an IV and a nonce? ,but I was hoping that I could get some clarity. ...
0
votes
0answers
58 views

Decrypting an AES string

I'm dealing with a website that loads a javascript file which eventually sets an AES hash/value (whatever it's called) as a cookie. The file is heavily obfuscated making it hard to understand certain ...
1
vote
1answer
47 views

Double permutation patterns for transposition ciphers, how to crack

I'm reading from Cornell , I know for a single permutation, I can find the ciphertext length (100), divide in some key lengths (10x10, 5x20), then try all permutation (10x9x8... 5x4x3x2x1). then find ...
0
votes
1answer
43 views

Can you break a Vigenere cipher with key length of 2 and message/cipher text length of 4?

I am currently working on a problem where an attacker knows that a user's password is either "pqrs" or "jmlo" and also knows that the encryption scheme is using the Vigenere cipher ...
0
votes
1answer
58 views

Security of a custom AES-based attack model

Provided that: $AES(plaintext, key)$ is the standard AES block cipher for a 128 bits block. $\oplus$ is the standard XOR operation. $K$ is a constant 128 bits pseudorandom value, which is used as the ...
0
votes
0answers
41 views

Breaking vulnerable ElGamal encryption

In a ctf, I encountered this problem: ...
3
votes
1answer
72 views

Are these two methods of differential cryptanalysis different?

I'm trying to understand how differential analysis works. I'm reading this and this tutorials, but it looks like they do different things. In the first paper author tells us to bruteforce last round ...
1
vote
0answers
33 views

Differential analysis for dummies, how key position impact on tactic? [closed]

Im new to cryptoanalysis and started reading A Tutorial on Linear and Differential Cryptanalysis. The author is trying to explain it as simple as he can. But I still got some questions, can anybody ...
0
votes
2answers
84 views

Which encryption algorithm is sensitive to an attacker having access to it?

We are contemplating hiding a sensitive information from our business partner by encrypting it. However, customers have access to both the sensitive and the encrypted information. Furthermore, they ...
0
votes
1answer
65 views

Find first two blocks of plaintext given a final plaintext block, the IV and ciphertext for CBC?

I have the following: complete ciphertext; iv; last block of plaintext including the padding which is 04040404. The encryption was made using AES-CBC-256. I can ...
1
vote
1answer
56 views

When attacking keyed algorithms, how is it known when the output is correct?

I've been reading a little bit about cryptanalysis, and I'm wondering how attacking algorithms that work on keys is performed. It's obvious how algorithms like MD5 are attacked, in pseudocode: ...
3
votes
0answers
80 views

Identifying correct cipher

I am trying to decrypt a text(~900 characters) and I started with the assumption that its a Vigenère cipher as the one of the identifier tool identified it as Vigenère cipher and also the Index of ...
2
votes
2answers
226 views

Is this permutation secure?

Let vector ${\bf d} \in \{ \pm 1 \}^n$ be the message we want to send. In my system, ${\bf d}$ is multiplied by an $n \times n$ Fourier matrix ${\bf F}$, as follows $$ {\bf x} = {\bf F} {\bf d} $$ ...
3
votes
1answer
89 views

How much information do I leak if I upload multiple ciphertexts with cleartext overlaps?

Suppose that $t_1, t_2, \ldots, t_n$ are my clear texts. Suppose that for any $(i,j) \in \{1,2,\ldots,n\}^2$, $t_i$ and $t_j$ only differ in, say, the 1st $m$-many characters. Finally, suppose that I ...
2
votes
1answer
80 views

are outputs of sha256 independent when padded with different seed each time, in other words, when inputs can be somewhat related

So I was wondering about what will be the dependence of the outputs when I padded one input with two different strings two times for technically generating two different strings, say the input string ...
1
vote
0answers
47 views

Code implementation of NTRU lattice attack

As mentioned here, BKZ is one way to break the NTRU lattice What is the most efficient attack on NTRU? I was wondering if there are any source codes which actually implemented this on the weaker NTRU ...
1
vote
1answer
50 views

Examples of multi output bit balanced Boolean functions

I am trying to find out and learn more about Balanced boolean functions. Wikipedia states that " a balanced boolean function is a boolean function whose output yields as many 0s as 1s over its ...
0
votes
0answers
19 views

Check linear and differential cryptanalysis of a new block cipher [duplicate]

I am developing a new block cipher primitive. I would like to test its robustness against attacks of linear and differential cryptanalysis. Is there a tool to evaluate this using only plaintext and ...
3
votes
2answers
110 views

Is the one-time pad secure if the key is computed so the ciphertext will consist only of “A”?

I recently learned about the one-time pad method, which has perfect security if the following conditions are met : The key must be truly random. The key must be at least as long as the plaintext. The ...
2
votes
0answers
66 views

Understanding Linear Cryptanalysis

I'm reading about the linear cryptanalysis of an SPN and I have some questions about the practicality of this. The example I'm looking at is from 3.3.3 of Stinson's Book and I believe the same example ...
0
votes
0answers
41 views

Do you know of other graphical implementations of the differential cryptanalysis I should know or I may have missed?

I wrote my master thesis in computer science last year and would like to share it with the community. When I got to know differential cryptanalysis (DCA), I probably used the same literature and web ...
0
votes
0answers
28 views

RSA PADDING WITH e=3 [duplicate]

I have a ciphertext which has been padded with spaces from left the message is 31 bytes long and e = 3 how can I recover the message with python code .
1
vote
1answer
159 views

Frequency Analysis on DES, AES, 3DES using Cryptool2

I am trying to analyze symmetric block ciphers like DES, 3DES and AES, using Cryptool 2. I want to do a frequency analysis on each of these ciphers, in order to comment whether this is an effective ...
2
votes
1answer
110 views

Is AES without T-Tables nor S-Box resistant to side-channel?

T-Tables and S-Boxes are prone to side-channel attacks, is an implementation without any lookup tables resistant to side-channel ? In this answer, https://crypto.stackexchange.com/a/63520/80926, the ...
-1
votes
1answer
69 views

Are there issues in how cryptography is used in this short code sample?

I want to encrypt some small text files so I can put them online, in non-restricted access (not the best idea, but it's cheap and simple). I know I should use something like Truecrypt instead of this, ...
1
vote
1answer
77 views

Is AES S-Box resistant to side-channel attacks?

I know that implemntations with T-tables such as Golang's are prone to side-channel attacks, but is AES's S-Box wihtout any additional table also insecure ?
0
votes
0answers
34 views

What kind of approach can I use to reverse the following encryption scheme?

I'm trying to reverse an encryption scheme without success. I have several pairs of ciphertext + plaintext and found the encryption method to be something like this: ...
1
vote
1answer
103 views

Can someone help me understand this?

In the book Serious Cryptography It says for a cipher's permutation to be secure "Different keys should result in different permutations. Otherwise it becomes easier to decrypt without the key: ...
0
votes
0answers
39 views

What is the code when looking at the LPN problem?

We are given the problem in this question. We know that we have to use the algorithm $A_D$ in order to get $e_i$. Our idea is that we construct a vector $l$ of $l_i$'s by getting $n$ samples from the $...
0
votes
0answers
31 views

Finding the relationship given by the generating elements of a non-abelian group (for a maximum case) where they correspond to finding cycles

Let $G=(\mathbb{Z}_p \times \mathbb{Z}_p) \rtimes_{\phi} \mathbb{Z}_q$, where $p$ and $q$ are odd distinct primes. Let $G$ be generated by the elements $s=(g_1,e_q)$ and $t=(e_p,g_3)$, $g_1,e_p \in \...
3
votes
0answers
118 views

Solving LPN using algorithm for syndrome decoding

Given an algorithm $A_D$ which solves an instance of the decoding problem $e \in \mathbb{F}_2^n$ in time $T_D$ given a parity check matrix $H \in \mathbb{F}_2^{(n-k)\times n}$ and a syndrome $s \in \...
0
votes
1answer
41 views

Anonymous key exchange protocol not secure vs. computationally unbounded adversary

Explain why an anonymous key exchange protocol cannot be secure against a computationally unbounded adversary.
2
votes
2answers
134 views

What is the difference between different corona tracing protocols?

At https://corona-tracing.org/ and https://www.cryptool.org/en/cto-highlights/corona-tracing an easy to understand way was presented how such contact tracing apps work from a cryptographical point ...
2
votes
1answer
93 views

Cryptosystems defined over the real numbers

In a computational setting it is clear that we cannot do computation over the real numbers, as we couldn't generate, much less store them, so we have to instead deal with numbers that approximate them....
0
votes
1answer
57 views

Diffie-Hellman Decryption with A, B, p, g, cipher Parameters

I have a Crypto assignment, trying different ideas for couple hours landed me nowhere. Supposedly during a Diffie-Hellman key exchange Alice sends bob an encrypted message, the message (cipher) is a ...
0
votes
1answer
64 views

Attacks on LCG with “self-XOR” output function?

Consider an ordinary LCG modulo $2^n$ with an internal state of $n$ bits and an output of $n/2$ bits, with the twist that instead of simply truncating the state to produce an output, we take the upper ...
0
votes
0answers
22 views

How does breaking AES with a side channel attack (CPA) differ from a side channel attack on something like a microcontroller?

I'm studying CPA side channel attacks. CPA stands for Correlation Power analysis and it can be used to break AES. I'm familiar with the process to crack AES on a microcontroller. I was just wondering ...
0
votes
2answers
64 views

would this be classed as a cipher text attack?

Say i'm given a cipher text to decrypt, however i also have access to a server that performed the encryption; where i could enter any plaintext and observe the result of encryption. would it be ...
0
votes
1answer
51 views

Hash function without avalanche effect but with few collisions

I am searching for a hash function which has these attributes: low Avalanche Effect, similiar files should get similiar outputs low number of collisions (if I have 0*10000 in one file, and 0*99999 + ...
1
vote
0answers
21 views

Size of messages in timing attack on RSA Montgomery

I'm codin' timing attack on RSA Montgomery which compares two sets ( the first one includes those which need a reduction in contrary to the second one ). But I got troubles with the Montgomery ...
0
votes
2answers
51 views

AES ECB deterministic encryption to perform Private set intersection

There are two parties, and each has a list of plain-texts. My end goal is to assign indices to unique plain-texts across both parties. My present approach is the following. Both parties perform a ...
0
votes
1answer
39 views

Canonical inclusion map in subfield attack on overstretched NTRU

I'm trying to understand subfield attacks on overstretched NTRU. In the paper https://eprint.iacr.org/2016/127.pdf authors used "canonical inclusion map" to lift vector to full lattice. What does ...
0
votes
0answers
60 views

Can someone explain the timing attack on RSA with Montgomery multiplication?

I have read several articles on the temporal attack against Montgomery multiplication to speedup RSA computations. However, I do not quite get the principle. I understood that there is a additional ...

1
2 3 4 5
26