Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [cryptographic-hardware]

Cryptographic hardware enables the handling of cryptographic tasks and/or problems using hardware instead of software solutions.

Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

In the context of Hardware Security and Cryptography, how do I calculate the Algebraic Normal Form for sboxes [duplicate]

In our hardware security exercise, I am trying to calculate the ANF function manually (Sboxes) for the given table: And I came up with the result as: I thought I was calculating it correctly using ...
TorJaks669's user avatar
1 vote
0 answers
65 views

I do not understand the result of 'proposition 2' of "MDx-MAC and building fast MACs from hash functions"

I saw the difference between the proof and the statement of "proposition 2" in the paper "MDx-MAC and building fast MACs from hash functions" by Bart Preneel & Paul C. van ...
hellobc's user avatar
  • 31
0 votes
0 answers
38 views

High throughput authentication on ARMv8

I am working on a project where I need to authenticate data in parallel with computations on that data. The idea is to stream data from memory onto the chip only once; while the data is on-chip, we do ...
Nate's user avatar
  • 1
0 votes
0 answers
77 views

AES SBOX Masking in Python

I am trying to create an AES Sbox masking based on this paper. In the paper, they tried to mask the sbox described in this other paper. The inversion is been done in GF(4). I know that it is mostly ...
John's user avatar
  • 1
3 votes
1 answer
239 views

RSA/ ECC keygen HW vs SW

i have a pretty straightforward question but i can’t seem to find an answer : Regardless of the physical protection provided by an HSM or TPM or any hardware cryptographic key storage system, are keys ...
khaled's user avatar
  • 51
1 vote
1 answer
208 views

Is the sha256 x86 extension close to optimal in silicon? (as it relates to a VDF)

I came across the Solana network utilizing sha256 as a "proof of history". They are using it as a pseudo-VDF (verifiable delay function). The reason it's pseudo is because verification is ...
LightTunnelEnd's user avatar
0 votes
0 answers
64 views

Open-Source Shamir Secret Sharing Hardware Implementations in GF

Is there any hardware implementation of Shamir's secret-sharing method available? I have only go the following two implementations in the existing literature. Paper 1 Paper 2 Anything more in the ...
Tan007's user avatar
  • 1
0 votes
0 answers
22 views

What is the use of Secure Protocol Data Management (SPDM)?

By going through the document: https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_1.2.0.pdf I could get that this spec will be used to verify the identify and attestation of h/w &...
Abhishek Maurya's user avatar
5 votes
1 answer
626 views

Reverse engineering hardware crypto processor for modular multiplication

I'm currently working with an undocumented crypto offload processor that is capable of accelerating modular multiplication in some fashion. I need to figure out what operation it is implementing ...
Hendi's user avatar
  • 53
2 votes
1 answer
290 views

Are passkeys actually hardware keys or are they just reversibly encrypted keys secured by a hardware key?

Passkeys have this complicated QR code + Bluetooth dance to enroll a new device which seems like it ought to be securely creating a key on the device in a TPM. However the messaging around "sync&...
Luke Schlather's user avatar
3 votes
1 answer
310 views

Wrap-unwrap of private key using EC master key

I want to wrap a private key out of a HSM, using an external EC key pair (master key) and then verify that I can recover it. The wrapping occurs as follows: Generate a secret AES key in the HSM, ...
3ric-T's user avatar
  • 61
0 votes
1 answer
138 views

Multiplicative Inverse in Point Addition/Point Multiplication

Walkthrough the textbook content, understand that we need to compute the slope of 2 points before can compute the new point as the result of addition. Multiplicative inverse is part of the operation ...
Pi-Turn's user avatar
  • 83
1 vote
0 answers
84 views

Need clarifications AWS Cloud HSM architecture [closed]

My apologies for the long post. I read on AWS docs that, when keys are generated using java keytool, the certificates are stored ...
mee's user avatar
  • 25
3 votes
4 answers
238 views

Are FPGAs faster than microcontrollers in cryptography?

So, for my capstone project, I've been working on a cryptographic algorithm accelerator on an FPGA. While it did get approved, I've been suggested to work on a more application-based idea that could ...
John T Doe's user avatar
1 vote
1 answer
203 views

How to obtain inverse key stream efficiently on Present cipher?

I was taking a look at the PRESENT lightweight cipher presented here. You can see an implementation of it in Python here. It is basically a Substitution-Permutation (SP) cipher with ultra-lightweight ...
tur11ng's user avatar
  • 962
4 votes
1 answer
348 views

What does "key version" refer to when talking about AES 128 in NXP's datasheet?

I'm going through the datasheet for MifareDesfire ICs. Throughout the document, there are mentions of "key version". For example, section 9.3 of the document states: Hardware AES using 128-...
Tung's user avatar
  • 143
1 vote
2 answers
257 views

Problem with implementation of Enigma Machine

I'm having trouble making an implementation of Enigma Machine in VBA. My question is about implementing the rotors and their move. To be more precise, I will show below the way that I code my Enigma ...
ZlatanAtm's user avatar
2 votes
1 answer
88 views

Can cryptographic accelerators along with side channel attack be used for GPS spoofing?

While having a discussion with someone on a forum about GPS spoofing, he mentioned that GPS signal can be spoofed for a cruising missile and make it land somewhere else using side-channel attack along ...
kioptrix's user avatar
4 votes
2 answers
314 views

Testing of PQC NIST round3 submissions

I am new to this field and have some concerns regarding PQC; How does NIST do a comparison that a particular algorithm is efficient and its security can not be broken by future quantum attacks? I am ...
Abdul Muneeb's user avatar
3 votes
0 answers
172 views

No Final subtraction in Word-level Montgomery Multiplication

I am trying to make an RSA module in VHDL, which in turn will be deployed to an FPGA. I am trying to implement a full Montgomery algorithm which means that I am working with the Montgomery ...
TheJonaMr's user avatar
1 vote
0 answers
121 views

Memory-hard key derivation algorithm where all requested memory is needed at every time moment

Background. All MKDF (memory-hard KDF) algorithms that I know (Scrypt, Argon2, Balloon) don't really require all the memory at every moment during the run time of algorithm's implementation, but ...
caveman's user avatar
  • 573
1 vote
2 answers
83 views

What is this meaning disconnected from processes performing key generation or zeroization in cryptography modu

In FIPS 140-2 Part 2:Interfaces and Port in the security policy of product told : 1- "the output data path is provided by the data interfaces and is logically disconnected from processes ...
Juliet's user avatar
  • 29
3 votes
0 answers
231 views

Schnorr signature in two steps, known vulnerabilities

We are looking to perform all the calculations for a Schnorr signature, more precisely EC-FSDSA, (BIP340-Schnorr), inside a secure element, to the exception of the Hash operation that is not supported ...
sarmluk's user avatar
  • 31
0 votes
0 answers
540 views

Cryptographic Principles: Bit-Flipping Attack

I'm working and reading about bit-flipping attack and how to set it up. I just got a question, which I am not sure, how I should answer. Question: 'Why is this easy with a stream cipher but not ...
KingA's user avatar
  • 1
1 vote
1 answer
160 views

RTL solutions to Post quantum candidates

I am looking for RTL implementations of the PQC finalists for KEM (McEliece, Kyber, Saber and NTRU) Saber provides the following repository McEliece provides some code from their website, but as far ...
Daftyler's user avatar
1 vote
1 answer
172 views

Error Correcting Codes Post Quantum Finalists

I have been looking into error-correcting codes in lattice, I am specifically hoping to find some information on hardware implementations for the NIST PQ PKE/KEM finalists (Saber, CRYSTALS-Kyber, NTRU)...
Daftyler's user avatar
2 votes
1 answer
411 views

Are GPUs inefficient for calculations on big numbers? Is RSA and EC cypto generally done on CPU only?

Looking specifically at RSA and EC algorithms which imply doing operations on integers >= 256 bits (>> 64 bits), I have noticed (from my limited experience) that 99% of the software for ...
Jean Monet's user avatar
3 votes
1 answer
155 views

How to ensure that a cryptographic implementation is reasonably sound/robust?

I know from the bottom of my heart how bad the idea of custom-crypto is. I absolutely concur with the recommendation that it should only be done by professionals who specialize in implementing crypto ...
krkhan's user avatar
  • 87
1 vote
1 answer
102 views

Attestation of private key deletion

I recently came across an article outlining a framework for a hypothetical cryptocurrency, the article is here if you care to read the whole thing. The relevant section is the "Digital Cash" ...
fiberBundle's user avatar
1 vote
0 answers
3k views

How quickly can we compute SHA256?

Disclaimer. I have asked a similar question on Electronics StackExchange: they advised me to try here. The question I am in the process of developing a simple protocol whose security relies on the ...
Matteo Monti's user avatar
  • 1,407
1 vote
0 answers
51 views

Help needed for IBM KCV

I found old key letters used in EFT HSMs with TDES keys, parted in two halfs. The check value printed on this letters is called IBM CV and doubled IBM CV. My newer HSM does not support this kind of ...
user2032902's user avatar
2 votes
1 answer
566 views

How to increase Poly1305 performance?

I was analysing the Chacha20 algorithm and the Poly1305 MAC generation from RFC 7539. It seems that the Chacha20 is quite faster compared to AES on CPUs without hardware support like AES-NI. But ...
Emmanuel Scaria's user avatar
3 votes
2 answers
742 views

Exchanging key material between HSMs of different manufacturers

In the future we may be setting up a system to secure a large number of symmetric (device) keys (a few million) by using HSMs. So, the keys themselves will be stored outside the HSM, but they will be ...
Kobodjo's user avatar
  • 31
6 votes
3 answers
396 views

Would asymmetric cryptography be feasible in World War II?

Assuming people in the forties would have known asymmetric cryptographic methods like RSA, would they have been able to make sensible use of them? There were no real electronic computers at the time, ...
J Fabian Meier's user avatar
1 vote
0 answers
45 views

Size of messages in timing attack on RSA Montgomery

I'm codin' timing attack on RSA Montgomery which compares two sets ( the first one includes those which need a reduction in contrary to the second one ). But I got troubles with the Montgomery ...
Black cryptographer's user avatar
0 votes
0 answers
48 views

Best method for storing cryptographic secret key and generation of IV in Trivium?

How the secret key for Trivium cipher is stored and managed in an embedded system (IoT sensor node)? How the IV is generated in a Trivium? How to justify the fact that storing a fixed value (for ...
Ans's user avatar
  • 73
1 vote
1 answer
140 views

Secretless authentication method for remote hardware

We're working with a microcontroller that is not secure enough to store secrets. The ROM could be dumped in a properly equiped lab. This is why we considered integrating a certified Secure Element ...
Elbattore's user avatar
18 votes
1 answer
1k views

Crypto AG (Switzerland) - Which algorithms were used and how did the backdoors work?

Backstory Crypto AG was a company located in Switzerland that specialized in communication security. They produced a number of encryption machines (some similar to the infamous Enigma) used for ...
AleksanderCH's user avatar
  • 6,462
1 vote
0 answers
162 views

TPM/FIDO Direct Anonymous Attestation practicality

DAA (Direct Anonymous Attestation) is not the only scheme to achieve anonymous attestation. In general, these schemes allow an entity to stay anonymous throughout the attestation process. The concern ...
Consy's user avatar
  • 367
4 votes
3 answers
458 views

Most secure but feasible encryption running on WWII technology

Imagine you are transported back to ~1940. What is the best (i.e. most secure, but technologically feasible) encryption you can think of for widespread (i.e. military) use? How would you implement it?
3244611user's user avatar
2 votes
1 answer
352 views

Where does signing/decrypting take place on a YubiKey 4/5 PIV private key?

I have a YubiKey 4 and want to use it to store a private key that should never enter a computer system's memory. After importing the key to the device I understand it never leaves it. Do the signing/...
samman's user avatar
  • 23
8 votes
5 answers
3k views

Can error correction and detection be done without adding extra bits?

I have gone through error detection and correction techniques like Hamming codes, and BCH codes require extra parity bits for detection and correction. While sending data, we always seem to introduce ...
Krishna Balupala's user avatar
2 votes
2 answers
98 views

Distinguishing Original VS Fake Products

Let's assume that we want to distinguish original vs fake products when a customer receives them. I was thinking about using a protocol similar to digital signature. My question is can this problem ...
Shannon's user avatar
  • 263
2 votes
1 answer
163 views

Mapping between NIST test and TRNG features

Each of the NIST tests are generally explained in Random Bit Generation - Guide to the Statistical Tests. I was wondering if some one can help me understand them better. For example, which tests show ...
Shannon's user avatar
  • 263
1 vote
0 answers
143 views

How does the offline authentication work?

In these slides, offline and online PUF-based authentication protocols are explained in minute 16:30 and 17:30, respectively. I understand the way the online protocol works. Basically, the server ...
Shannon's user avatar
  • 263
4 votes
2 answers
765 views

What is the security concept in printer cartridge?

Based on this datasheet or this patent, one of the usage of PUF is printer cartridge identification and authentication. I was wondering why printer cartridge needs identification and authentication. ...
Shannon's user avatar
  • 263
0 votes
1 answer
270 views

Block chain and storage issues

On reading about block chain technology, it was observed that it leverages the distributed ledger technology through P2P, here integrity is ensured through hash computed by miners, and then is ...
PDHide's user avatar
  • 247
2 votes
1 answer
377 views

Are hardware encryption chips safer than their software counterparts for desktop apps?

Wouldn't accessing the hardware encryption chip be safer than relying on an encryption library? My question is prompted as a response to @SqueamishOssifrage replying on the "Properly securing a ...
mar233's user avatar
  • 23
5 votes
1 answer
266 views

How would we design a fast circuit to solve LCS35?

LCS35 is a time-lock puzzle, stated in Ronald L. Rivest's Description of the LCS35 Time Capsule Crypto-Puzzle [1] (April 1999). That instantiates a system in Ronald L. Rivest, Adi Shamir and David A. ...
fgrieu's user avatar
  • 142k
2 votes
1 answer
410 views

HMAC computation using AES key

I want to compute an HMAC value of a data set using CKM_SHA256_HMAC mechanism with AES key. I have the error code CKR_KEY_TYPE_INCONSISTENT because it seems that I need to use a key of key_type ...
Nitin V Kuttan's user avatar