Questions tagged [cryptanalysis]

Analysis of individual security aspects of a cipher or algorithm, not the security of a cipher or algorithm in general (which would lean towards “algorithm-design”).

184 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

Whether the proof created by prover can be tampered in zero knowledge proofs?

I am studying zokrates recently. I know that the prover will finally generate a proof, and then the verifier can use this proof and public input as input to verify whether the prover has certain ...
0
votes
0answers
20 views

Is it hard to determine an automorphism when the mapped value by several compositions of the automorphism is given

Generalization of the Discrete logarithm problem to non-abelian groups is discussed by many authors. One of the generalizations is shown in MOR cryptosystem as in the below link, by considering the ...
0
votes
0answers
40 views

Composing subexponential L-function

Suppose $y=f(x)$ and $z=g(y)$ such that $y\in L_x[a,b]$ and $z\in L_y[c,d]$, where $L$ is the usual sub-exponential asymptotic notation $$L_x[a,b] = \exp\left((b+o(1))(\log x)^a(\log\log x)^{1-a}\...
0
votes
0answers
32 views

What is the formal name for determining the key to a Vigenere cipher using frequency analysis once the key length has been found?

In short, I am writing a paper about cracking the Vigenere cipher. There are supposed to be three parts to it and each is supposed to be related to an academic article (or anything formal). I chose ...
0
votes
0answers
69 views

Highest number of security bits breakable

I saw this video from 3blue1brown called "How secure is 256 bit security?". But this title is kind of meaningless if we don't have any information on the cryptographic primitive in question. ...
0
votes
0answers
81 views

Cryptanalytic tests for biased nonces

In the paper Biased Nonce Sense: Lattice Attacks against Weak ECDSA Signatures in Cryptocurrencies on section 5.2 Cryptanalytic tests for biased nonces, one of test is: Select two signatures at ...
0
votes
0answers
62 views

Decrypting an AES string

I'm dealing with a website that loads a javascript file which eventually sets an AES hash/value (whatever it's called) as a cookie. The file is heavily obfuscated making it hard to understand certain ...
0
votes
0answers
34 views

Finding the relationship given by the generating elements of a non-abelian group (for a maximum case) where they correspond to finding cycles

Let $G=(\mathbb{Z}_p \times \mathbb{Z}_p) \rtimes_{\phi} \mathbb{Z}_q$, where $p$ and $q$ are odd distinct primes. Let $G$ be generated by the elements $s=(g_1,e_q)$ and $t=(e_p,g_3)$, $g_1,e_p \in \...
0
votes
0answers
81 views

Can someone explain the timing attack on RSA with Montgomery multiplication?

I have read several articles on the temporal attack against Montgomery multiplication to speedup RSA computations. However, I do not quite get the principle. I understood that there is a additional ...
0
votes
0answers
97 views

How to extract the keyword from a mono-alphabetic substitution cipher

I am a beginner to cryptography and I have the following question. I know that to extract plaintext from a mono-alphabetic substitution cipher I can perform shifting the characters by $n$ times until ...
0
votes
0answers
314 views

Is it possible to crack the trifid cipher without the keyword?

I was learning about the classical ciphers and was looking up the methods to break them without the keywords and when I searched up "cryptanalysis of the trifid cipher" I couldn't find anything. I ...
0
votes
0answers
102 views

What is the best way to attack enigma without any a priori knowledge about the plaintext?

I know in great (great great great) detail about how they cracked enigma during the second world war. Looking into it, I decided to have a crack at breaking it. I've come apon a single problem with my ...
0
votes
0answers
39 views

Lineary of Sbox in DES

I'm not a mathematician, and i would like to understand in the most concise way (if possible) why choosing linear S-Box functions makes the DES algorithm attackable. Thanks
0
votes
0answers
110 views

Differential cryptanalysis filtering process

This question is a little more implementation based. I am writing my masters thesis on differential cryptanalysis and I wrote a program to evaluate some things about differential cryptanalysis. I ...
0
votes
0answers
35 views

Help, Feedback and Solutions to a problem on a PoC CSPRNG

Background I do not recommend trying to roll your own crypto. This is just a for-fun PoC, which won't be used in any public or private scenario. I am creating a PoC nearly-true random number ...
0
votes
0answers
53 views

Collision resistance of a function which chooses the hash from a large table of hashes

Let's say you know a (possibly) large table of ids and some corresponsing hashes $h_{ID_j} = H(ID_j | secret_j)$. The resulting table looks like $$ ID_1 | h_{ID_1} $$ $$ ID_2 | h_{ID_2} $$ $$ ... $$ $...
0
votes
0answers
59 views

Unique numbers with $P^aQ^bR^c \mod N$ for each combination of $a,b,c$ possible? Would it be safer than separate form (like $T^a \mod P$ for each)?

Main question: Is the computation of $a,b,c$ in $P^aQ^bR^c \mod N$ (much) harder than in $T_p^a \mod P$, $T_q^b \mod Q$, $T_r^c \mod R$ ? (assuming the first form exists) $P^aQ^bR^c \mod N$ With $P^...
0
votes
0answers
221 views

Choosing K in ECDSA SECP256K1

I am working on a very resource-constrained environment. Using a standard peer reviewed library isn't possible because it won't fit within the RAM requirements of the device (~5K unused ram without ...
0
votes
0answers
143 views

Could any one suggest alternative Zero knowledge proof protocol to Schnorr protocol ZKP?

I read that Schnorr protocol cannot be proved zero knowledge on that link: Perfect zero knowledge for the Schnorr protocol? Could any one suggest alternative Zero knowledge proof protocol so a prover ...
0
votes
0answers
314 views

How to get unknown constants from linear congruential generator

I need to crack this linear congruential generator. I have $$X_{n+1}=a⋅X_n +b \pmod m$$ I know: $m=31,X_3=30,X_4=19,X_5=26$ How can I find $a,b$ and $X_0$? I have got already the following ...
0
votes
0answers
76 views

Computing a probability

Let $(w_1,\cdots,w_l) \in (\{0,1\}^\lambda)^l$, and $r_1,\cdots,r_l $ are chosed as uniformly random from $Z^*_q$ such that $r_1+\cdots+r_l=0$ and $q$ is a large prime number. Also, Let $F$is a ...
0
votes
0answers
164 views

Why is the slide attack called a generic attack if it depends on each round being the same?

From reading the answers on this website, a generic attack is one that works on all block ciphers (e.g., brute force). The slide attack does not work if the round functions are different, whether they ...
0
votes
0answers
109 views

Determining number of required plaintext pairs for differential cryptanalysis

When carrying differential analysis of a SPN network, how can one determine the number of required plaintext for the attack to be successful with high probability?
0
votes
0answers
79 views

Perfect Secrecy and Message distributions

It is know that for a perfect secrecy scheme, for all m1,m2 and c: $Pr[C=c | M=m1] = Pr[C=c | M=m2]$ I also know that for all distributions of M, m1,m2 and c: $Pr[M=m1 | C=c] = Pr[M=m2 | C=c]$ Does ...
0
votes
0answers
88 views

Found weil pairing. Index Calculus method on the results of weil pairing

Consider Elliptic curve with p = 59, A = 1, B= 0, P = (25,30) and Q=(35,31). So I tried to solve this using MOV attack. The torsion point for them E[5] is R(-25,30i) where is sqroot -1 Chosen two ...
0
votes
0answers
134 views

Permuted Hash Table

Suppose we have a hash table, $HT$, consisting of $100$ bins.The hash table uses a hash function $H$ that is public. We all know that given value $a$ we can compute the address in the hash by $H(a)=j$...
0
votes
0answers
57 views

When we use permutation and random long sting to hide a message

This question is modified version of this: Can we use merely permutation to hide a message? I have an English name $m=m_1 || m_2 ||..||m_{30}$. I pick a random string $d=d_1 ||..||d_{70}$ I mix ...
0
votes
0answers
85 views

Cryptanalysis and Copying encrypted volumes

I just recently concerned myself with cryptography due to Snowden's revelations and there are a few things I cannot really wrap my head around but maybe you can help me with that. I am not a ...
0
votes
0answers
1k views

Finding Patterns in Encrypted Data

I am looking for an application (Windows) or code example that might help me find patterns in an encrypted file. I have a ciphertext for which I want to see when a key is repeated. I am not trying ...
0
votes
0answers
116 views

Determine encryption method with input and output

A website stores username and password in a session cookie. In the cookie the password is "encrypted" or modified in some way. Given that the "encrypted" version is always the same, I do not believe ...
0
votes
0answers
368 views

Is ASCON cipher broken?

http://eprint.iacr.org/2015/030 present several attacks of ASCON but does not have a conclusion section. I'm having troubles estimating what are the consequences on the use of ASCON. What's your ...
0
votes
0answers
406 views

Polynomial Inversion over Galois Field

Hello guys I am looking to calculate the Inverse of a given polynomial in Galois field I have found the little Fermat's algorithm and the Itoh-Tsujii I am getting a bit confused with both algorithm ...
-1
votes
1answer
99 views

Advantage of existing Cryptosystems

I have read about the concept of perfect secrecy and statistical distance. The perfect secrecy is impossible to be implemented on real world scenario. So the cryptosystems used at various websites ...
-2
votes
1answer
498 views

Having plaintext and ciphertext, how can I learn more about key/encryption?

I have an OLD work database that seems to have a simple encryption on the PW. I have one users whose pw is 7777 the cipher text is ...

1 2 3
4