Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [cryptographic-hardware]

Cryptographic hardware enables the handling of cryptographic tasks and/or problems using hardware instead of software solutions.

22 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
0 answers
171 views

No Final subtraction in Word-level Montgomery Multiplication

I am trying to make an RSA module in VHDL, which in turn will be deployed to an FPGA. I am trying to implement a full Montgomery algorithm which means that I am working with the Montgomery ...
TheJonaMr's user avatar
3 votes
0 answers
230 views

Schnorr signature in two steps, known vulnerabilities

We are looking to perform all the calculations for a Schnorr signature, more precisely EC-FSDSA, (BIP340-Schnorr), inside a secure element, to the exception of the Hash operation that is not supported ...
sarmluk's user avatar
  • 31
3 votes
0 answers
6k views

Support for hardware-accelerated crypto AES on ARMv8 processors running in 32-bit mode?

As I understand it, all ARM processors based on the 32/64-bit ARMv8-A architecture (and more recent iterations) support hardware-accelerated AES instructions. Under Linux, the feature flags in ...
Dan Lenski's user avatar
3 votes
0 answers
150 views

When to chose hardware accelerated crypto for Big Data

if you were to recommend a cipher/mode configuration that emphasizes performance for your customers, would you recommend a hardware based accelerated solution over one that isn't? For big data at rest/...
Blaze's user avatar
  • 551
3 votes
0 answers
804 views

Implementation specific differences between RDRAND and RDSEED

I've read Intel's The Difference Between RDRAND and RDSEED and Intel Digital Random Number Generator (DRNG) Software Implementation Guide, but I have some open questions that are specific to usage in ...
user avatar
2 votes
1 answer
163 views

Mapping between NIST test and TRNG features

Each of the NIST tests are generally explained in Random Bit Generation - Guide to the Statistical Tests. I was wondering if some one can help me understand them better. For example, which tests show ...
Shannon's user avatar
  • 263
1 vote
0 answers
65 views

I do not understand the result of 'proposition 2' of "MDx-MAC and building fast MACs from hash functions"

I saw the difference between the proof and the statement of "proposition 2" in the paper "MDx-MAC and building fast MACs from hash functions" by Bart Preneel & Paul C. van ...
hellobc's user avatar
  • 31
1 vote
0 answers
121 views

Memory-hard key derivation algorithm where all requested memory is needed at every time moment

Background. All MKDF (memory-hard KDF) algorithms that I know (Scrypt, Argon2, Balloon) don't really require all the memory at every moment during the run time of algorithm's implementation, but ...
caveman's user avatar
  • 573
1 vote
0 answers
3k views

How quickly can we compute SHA256?

Disclaimer. I have asked a similar question on Electronics StackExchange: they advised me to try here. The question I am in the process of developing a simple protocol whose security relies on the ...
Matteo Monti's user avatar
  • 1,407
1 vote
0 answers
51 views

Help needed for IBM KCV

I found old key letters used in EFT HSMs with TDES keys, parted in two halfs. The check value printed on this letters is called IBM CV and doubled IBM CV. My newer HSM does not support this kind of ...
user2032902's user avatar
1 vote
0 answers
45 views

Size of messages in timing attack on RSA Montgomery

I'm codin' timing attack on RSA Montgomery which compares two sets ( the first one includes those which need a reduction in contrary to the second one ). But I got troubles with the Montgomery ...
Black cryptographer's user avatar
1 vote
0 answers
162 views

TPM/FIDO Direct Anonymous Attestation practicality

DAA (Direct Anonymous Attestation) is not the only scheme to achieve anonymous attestation. In general, these schemes allow an entity to stay anonymous throughout the attestation process. The concern ...
Consy's user avatar
  • 367
1 vote
0 answers
143 views

How does the offline authentication work?

In these slides, offline and online PUF-based authentication protocols are explained in minute 16:30 and 17:30, respectively. I understand the way the online protocol works. Basically, the server ...
Shannon's user avatar
  • 263
1 vote
0 answers
90 views

How is pipelined DES different from sequential DES?

I implemented DES Coder in VHDL using ISE IDE by Xilinx in sequential architecture which was pretty easy and straightforward. Now my task is to do the same using pipelined architecture so that the ...
Filip Mazi's user avatar
1 vote
0 answers
360 views

Which cryptographic operations can be optimized with a GPU? When shouldn't it be done?

I'm under the impression that GPUs are only used to optimize some (not all) of a given cryptographic operation. Furthermore, I've only seen this GPU optimization done in Bitcoin. This observation ...
makerofthings7's user avatar
1 vote
0 answers
713 views

Accelerated hashing on consumer-grade CPU?

Question is a follow-up to this one. The question was about accelerating SHA1. I am writing an application, where I do have a choice of hash algorithm, as long as it's a strong one. I want to be able ...
galets's user avatar
  • 111
0 votes
0 answers
38 views

High throughput authentication on ARMv8

I am working on a project where I need to authenticate data in parallel with computations on that data. The idea is to stream data from memory onto the chip only once; while the data is on-chip, we do ...
Nate's user avatar
  • 1
0 votes
0 answers
76 views

AES SBOX Masking in Python

I am trying to create an AES Sbox masking based on this paper. In the paper, they tried to mask the sbox described in this other paper. The inversion is been done in GF(4). I know that it is mostly ...
John's user avatar
  • 1
0 votes
0 answers
63 views

Open-Source Shamir Secret Sharing Hardware Implementations in GF

Is there any hardware implementation of Shamir's secret-sharing method available? I have only go the following two implementations in the existing literature. Paper 1 Paper 2 Anything more in the ...
Tan007's user avatar
  • 1
0 votes
0 answers
22 views

What is the use of Secure Protocol Data Management (SPDM)?

By going through the document: https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_1.2.0.pdf I could get that this spec will be used to verify the identify and attestation of h/w &...
Abhishek Maurya's user avatar
0 votes
0 answers
530 views

Cryptographic Principles: Bit-Flipping Attack

I'm working and reading about bit-flipping attack and how to set it up. I just got a question, which I am not sure, how I should answer. Question: 'Why is this easy with a stream cipher but not ...
KingA's user avatar
  • 1
0 votes
0 answers
48 views

Best method for storing cryptographic secret key and generation of IV in Trivium?

How the secret key for Trivium cipher is stored and managed in an embedded system (IoT sensor node)? How the IV is generated in a Trivium? How to justify the fact that storing a fixed value (for ...
Ans's user avatar
  • 73