Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [cryptographic-hardware]

Cryptographic hardware enables the handling of cryptographic tasks and/or problems using hardware instead of software solutions.

1
vote
0answers
36 views

PKCS#11. Possibility of performing Ecryption/Decryption in hardware [closed]

Cheers. I'm dealing with HSM via PKCS#11 C/Python interface. I'm wondering is it possible to do some C_Encrypt/C_Decrypt in ...
2
votes
1answer
112 views

What stops a physical attacker to use a dumped uninitialized SRAM with SRAM-PUF?

Does SRAM-PUF require the microcontroller/system to be (1) on the same silicon piece and (2) to prevent access from dumping the SRAM in an uninitialized state in order to be tamper-proof? In SRAM ...
1
vote
1answer
56 views

Applicability of physical unclonable functions for public-key cryptography

Can physical unclonable functions (PUFs) be used to protect secrets against physical tampering in the context of public-key cryptography? Some solutions (i.e. ChipDNA or QuiddiKey) apparently use ...
8
votes
2answers
992 views

Hardware AES: can we have a decryption implementation only?

I'm wondering if implementing only the AES decryption can reduce the hardware cost? And does anybody have some examples of the cost (speed, size) of hardware AES implementation? Thanks, Abaobaide
1
vote
0answers
26 views

How implement doubling point using VHDL language [closed]

I have a problem with my implementation. I want to make a multiplication in finite field. I don't know If my scheme is correct, but I made code on this base. I want to calculate: D= XY D=DX Some ...
1
vote
0answers
252 views

Support for hardware-accelerated crypto AES on ARMv8 processors running in 32-bit mode?

As I understand it, all ARM processors based on the 32/64-bit ARMv8-A architecture (and more recent iterations) support hardware-accelerated AES instructions. Under Linux, the feature flags in ...
0
votes
1answer
37 views

HSMs: Encrypt/Decrypt - But Not Read or Export Key

Can HSMs be configured to store a key, and allow encryption or decryption with said key, but prevent any export or backup of the key itself? We're basically trying to develop a system using ...
1
vote
1answer
297 views

Choice of ECC curve on USB token

I would like to get a USB token to secure my keys. My use case is protection of 3 GnuPG keys that I will be using 10 times per day at least. I plan to create a new key ring from scratch. Because ECC ...
1
vote
0answers
65 views

How is pipelined DES different from sequential DES?

I implemented DES Coder in VHDL using ISE IDE by Xilinx in sequential architecture which was pretty easy and straightforward. Now my task is to do the same using pipelined architecture so that the ...
0
votes
1answer
313 views

How can I generate key scheduling for AES 256 bit key

I want to implement AES algorithm,instead of 128 bit key encryption I wanted to do it for 256.But I’m stuck at point creating scheduling for 256 key generation. Can anyone help in this.
0
votes
0answers
48 views

Constructing Signatures for Crypto Systems

I am working KVM/Qemu and have livbirt installed and I am trying to construct signatures for each cryptographic system , so I can detect when the VMs are running cryptographic system in real time .. I ...
3
votes
1answer
143 views

RSA hybrid decryption via PKCS#11 - unwrap or decrypt?

I have an application that does RSA hybrid encryption/decryption – i.e., messages are encrypted with a fresh AES key, which is then itself encrypted with RSA-OAEP and sent with the message. Decryption ...
1
vote
1answer
127 views

Basic question on interaction with HSM using PKCS11

I am a beginner on cryptography, I've been reading about PKCS11 and usage of PKCS11 on HSM's I understand the concept of HSM, I read about the HD wallets in bitcoin how keys are hashed and combined ...
2
votes
0answers
187 views

SHA3 hardware implementation [closed]

I am studying SHA3 in order to create a hardware implementation, preferably in verilog. I have downloaded VHDL reference implementation from https://keccak.team/hardware.html. The code is great, and ...
4
votes
1answer
542 views

AES s-box – How do I calculate the inverse of this field equation?

I want to implement AES algorithm,instead of LUT based S-box, but I’m stuck at point creating "Inverse of equation" during implementation. In creation of S-box I am using the following steps: ($...
1
vote
2answers
317 views

Constant time implementations of crypto algorithms

To protect against cache attacks (side channel attacks) generally constant time crypto implementations are advised. In some cases DJB released new algorithms (chacha) that are designed with this in ...
5
votes
1answer
138 views

Making attacks on password hashes less economical

Perhaps an abstract question on complexity given the trade offs between memory vs runtime, I was wondering if it's possible to constrain only either extremes approaches to be optimally efficient, thus ...
25
votes
5answers
7k views

Can a hard drive store clear text data that is physically impossible to retrieve?

I'm trying to study how HSM and TPM works when storing secret data in clear text. How can they achieve physical impossibility in retrieving secret data? I get the point in software, if you just have ...
4
votes
3answers
104 views

Modifying an Enigma machine to allow unchanged letters

One of the biggest flaws of Enigma was that a letter couldn’t represent itself because the route through the machine was one-way. I was thinking a quick fix could be to introduce a rotor position that ...
3
votes
2answers
119 views

Why EMI/EMC testing is necessary of Cryptographic Equipment?

In the Book, "Endpoint Security" Page 265, It includes Electromagnetic Interference / Electromagnetic Compatibility Testing in Heading Level 1. Why is it necessary for Cryptographic Equipment to ...
4
votes
1answer
92 views

How is the inter and the intra distance of a PUF calculated?

I was wondering, if I want to calculate the intra distance of a PUF, and I have already measured $n$ times a response to a challenge. Do I choose one reference value and compare the hamming distance ...
0
votes
1answer
170 views

Confused about final subtraction of modulus in Montgomery Multiplication, during modular exponentiation

I'm confused about how one might supposedly bypass the final subtraction of the modulus in radix-2 montgomery modular multiplication, when used in a modular exponentiation algorithm. The following two ...
1
vote
1answer
148 views

How can PUF hardware be proportional to the number of challenge/response bits?

Wikipedia article claims that physical unclonable functions are superior to ROM because they require less hardware: Unlike a ROM containing a table of responses to all possible challenges, which ...
1
vote
2answers
921 views

What is the relation between x y and r s in an ECDSA signature?

I'm writing functions in C using OpenSSL and the EVP interface to interact with Intel SGX. One of those functions calculates an ECDSA (with SHA256) signature over some data. The output of the ECDSA ...
1
vote
1answer
185 views

PKCS #11 – Deriving a Key where MSB perform encryption and LSB perform CMAC operation?

I am using Thales HSM, a PKCS #11 Compliant device. I have an 32 byte AES key and derivation input. I want to use AES-ECB encryption Mode to derive a 32 byte key where 16 MSB should be considered as ...
5
votes
2answers
69 views

How many computations does it take to figure out the input if you know the function and you know its output to another known function?

I have no background in cryptography so excuse me if this question is a little basic or poorly defined. I'm trying to build a circuit using microcontrollers that implements a hash function of some ...
5
votes
3answers
718 views

What are the dangers of using CPU clock drift for generating random data?

From what I understand, a physical source of true randomness could be achieved with a multi-core processor, by using clock drift between two or more cores. However, a processor is easier to ...
8
votes
1answer
2k views

Is ChaCha20 safer than AES with respect to side-channel attacks?

I've already seen some topics on this matter, but I feel like my question hasn't really been answered. Given the following: AES must be implemented in hardware (i.e. using the AES-NI instruction set)...
1
vote
0answers
117 views

Which cryptographic operations can be optimized with a GPU? When shouldn't it be done?

I'm under the impression that GPUs are only used to optimize some (not all) of a given cryptographic operation. Furthermore, I've only seen this GPU optimization done in Bitcoin. This observation ...
3
votes
1answer
499 views

Hardware random number generator for lottery?

To be able to generate random numbers for lottery games, we have the following requirement: The random number generator, which uses the deterministic algorithm to determine the game result, has to ...
1
vote
2answers
115 views

Using crypto to build a clone resistant system

My question is related to using cryptography to build clone resistant system. I am building an embedded system with ARM based commodity hardware board. Thus the intellectual property which makes the ...
11
votes
1answer
485 views

(EC)DSA signature without hashing, or with offloaded hash?

In (EC)DSA as per FIPS 186-4, the message to sign is first hashed. Imagine that we skip this hashing stage, instead put the message where the hash was, and constrain the size of message $h$ to the ...
11
votes
2answers
2k views

Different ways/algorithms for implementing AES

I have seen a couple software implementations of the Advanced Encryption Standard. They are pretty much straight forward, i.e. they are implemented exactly the same way as the AES is described. This ...
7
votes
3answers
970 views

Usage difference between x86 RDRAND and RDSEED

Modern x86 CPUs often have the RDRAND and RDSEED instructions for hardware generation of random numbers. I just don't understand the difference between them. Intel has this document: https://...
-1
votes
2answers
87 views

Why is on-chip data considered to be secure in secure processor setting?

I was taking a look into the paper PHANTOM: Practical Oblivious Computation in a Secure Processor. The introduction says, Confidentiality of data is a major concern for enterprises and ...
3
votes
2answers
955 views

Can AES-NI be used to accelerate asymmetric encryption?

AES-NI optimized processors can be used to accelerate AES, which is a symmetric crypto. Can it also be used to accelerate asymmetric crypto?
-1
votes
1answer
186 views

DES in hardware

Assuming that data is flowing in at a rate of n bits/sec and 1 iteration of DES can be performed in 1 clock cycle. Can we develop an expression for clock frequency, if DES were to be implemented using ...
0
votes
0answers
104 views

Vector implementation of AES?

I'm thinking of a Vector implementation of AES on hardware (FPGA) I am not sure if this is a practical idea. But if implemented , it would be mimicking SIMD - Single Instruction Multiple Data kind of ...
2
votes
6answers
3k views

Running Crypto on hardware — e.g., AES in hardware

I am trying to understand the difference between a crypto algorithm run in hardware from that run in software. From a previous post (see here: Difference between Hardware implemented algorithm and ...
7
votes
1answer
252 views

Are coprocessors (Intel Phi) a threat for modern Key Derivation Functions?

Modern KDF are memory hard to contrast parallelism and as far as I know this is working well. Last year there was the password hashing competition (phc 2015) where new KDF were presented, Argon2 is ...
4
votes
2answers
263 views

HSM RNG - Compliance to FIPS 186-2

If the RNG of a HSM is said to be compliant to FIPS 140-2 (approved DRBG - SP 800-90 CTR mode) does also imply that it is compliant to FIPS 186-2 ?
4
votes
0answers
94 views

When to chose hardware accelerated crypto for Big Data

if you were to recommend a cipher/mode configuration that emphasizes performance for your customers, would you recommend a hardware based accelerated solution over one that isn't? For big data at rest/...
1
vote
1answer
72 views

Would A5/1 with a much larger state be a good choice of stream cipher for hardware?

Would A5/1 with a much larger state be a good choice of stream cipher for hardware? Assume that a reasonable choice of MAC is made such as GMAC, with the first 128 bits of the stream cipher output ...
15
votes
2answers
1k views

Is it possible to utilize an AES-128 encryption hardware unit for AES-256?

There exist processors (for example ARM v8/v9 archicteture based), which cannot do AES-256 hardware based, but are equipped with AES-128 encryption hardware units. Is it possible to utilize an AES-...
-1
votes
1answer
74 views

application of algebra to cryptography [closed]

I have taken some courses on algebra like abstract algebra, linear algebra etc. I want to know more on the application of algebra to cryptography.I don't know if anyone can be of help. thanks.
1
vote
2answers
264 views

Can “Approximate Hashing” work in a Proof-of-Work context?

Here is a draft of an article claimed to soon appear in a peer-reviewed conference: Matthew Vilim, Uenry Duwe, Rakesh Kumar, Approximate Bitcoin Mining. It is proposed to simplifying a SHA-256 engine ...
2
votes
1answer
2k views

SHA256 for large files

I have a hardware engine for SHA256 which can process 64K of data, but the input data size I am getting is around 1MB. What should I do to process 1MB size. What should be my input after 1st 64KB ...
11
votes
2answers
684 views

Is CPU timing jitter a usable entropy source?

In some virtualized environments, the only source of entropy available is CPU timing jitter. Can one get enough entropy from this source for practical uses? Also, is this secure against local side-...
8
votes
2answers
4k views

Difference between Hardware implemented algorithm and software implemented one?

In the articles about cryptography I see the words Hardware implemented and Software implemented. I'm curious to know what is the difference between them? In the other words, even in the computer ...
11
votes
1answer
265 views

How to tell if a hardware RNG is rigged?

On a related note of building my own RNG, as someone suggested to use several commericial solutions how can I check if it is rigged against me? (although I am still strongly biased to a homebrew ...