Newest 'dictionary-attack' Questions

1

vote

2answers

150 views

Crack AES encryption via passphrase dictionary attack?

How easy would it be to crack a AES-256 encrypted file, that is protected by a passphrase? I understand that the trying to brute force a AES-256 encryption key would be on the unfeasible side, even ...

asked Jun 19 at 13:41

Kelthar

133 bronze badges

1

vote

1answer

61 views

Could PAKE via smooth projective hash function protect agaist replay attacks?

I came across some password-based authenticated key exchange (PAKE) protocols that are based on the smooth projective hash function (SPHF) in the standard model. And I checked some related works, and ...

zero-knowledge-proofs authentication replay-attack pake dictionary-attack

asked Jul 7 '20 at 14:28

Z.P.

3131 silver badge6 bronze badges

6

votes

1answer

755 views

Does having a hash of a password jeopardize the security of plaintext that was encrypted with that password?

A malicious actor wants to decrypt ciphertext that was encrypted with a password. He also possesses the hash (bcrypt/PBKDF2) of that password. Does he have any significant practical advantage in ...

encryption hash attack password-hashing dictionary-attack

asked May 30 '20 at 19:33

OwenFlanders

633 bronze badges

0

votes

0answers

126 views

Argon2id benchmarks

Recently I've decided to publish a simple app that I am using for maintaining and storing sensible encrypted data on the cloud. https://www.microsoft.com/store/apps/9NSGBQSJ2HD6 The hashing is done ...

brute-force-attack password-hashing argon2 dictionary-attack

asked Apr 18 '20 at 8:07

Francesco Milani

1011 bronze badge

1

vote

0answers

61 views

Why isn't Kerberos using temporary keys to avoid dictionary attacks?

In the Kerberos protocol, the user sends his ID, the server (Or ticket granting server) ID and a nonce value. The Key Distribution Center uses a key (I assume symmetrical) derived from the client's ...

protocol-design dictionary-attack kerberos

asked Feb 29 '20 at 15:06

asaf92

1213 bronze badges

3

votes

1answer

724 views

Performing a dictionary attack on RSA/ECB with no padding

I have the exponent $e=2^{16}+1$ and modulus $n$ (154 digit number) of an RSA public key along with the ciphertext (64 bytes) encrypted using the same key with RSA/ECB and no padding. I am required ...

encryption rsa public-key ecb dictionary-attack

asked Dec 3 '18 at 13:08

2nce

455 bronze badges

1

vote

1answer

342 views

Is forward search attack is the same as dictionary attack?

Currently, I started to learn about secure passwords in password file. The password file contains the hashed values for passwords. I know that the forward search attack for a password that if an ...

hash attack dictionary-attack

asked Oct 27 '18 at 0:44

USER6512156

133 bronze badges

2

votes

2answers

395 views

How to prove that a rainbow table is complete?

Passwords that are hashed but not salted can be cracked using the rainbow table. I went through this and this which explains the logic behind rainbow table very well. But I am missing something about ...

passwords attack password-hashing rainbow-table dictionary-attack

asked Sep 29 '18 at 18:48

Manohar

1434 bronze badges

0

votes

2answers

445 views

Passphrases, Dictionary attacks and 'bit shift'

How much better would a passphrase be if you swapped the first letters of each word with a shift to the left: "correct battery horse staple" becomes "borrect hattery sorse ctaple" This would be ...

passwords dictionary-attack

asked Jul 26 '17 at 14:17

JustWanderingWondering

31 bronze badge

1

vote

0answers

64 views

Does a password that's cracked someone's account increase the chances of cracking someone else's account?

For every find in password that cracks someone's account, does that particular password have a higher probability of cracking someone else's account more than a brute force dictionary choice? How ...

reference-request passwords dictionary-attack

asked May 5 '16 at 3:16

John Palmer

111 bronze badge

1

vote

1answer

294 views

Why does the Secure Remote Protocol have resistance of dictionary attack?

Assume that Eeve who masquerades as a legitimate host and convinces Carol to make an authentication attempt. (Carol wants to handshake with Steve – a host) Thus, Eve can get values $A = g^a, M1 = H(A,...

srp dictionary-attack

asked Nov 23 '15 at 20:37

Eps Yoo

212 bronze badges

4

votes

1answer

4k views

What are the problems of IKEv1 aggressive mode (compared to IKEv1 main mode or IKEv2)?

I would like to seek confirmation/clarification of the following statements about IKE: IKEv1 aggressive mode is supposed to be “insecure” if used with PSK. But as far as I can see, correct (or more ...

key-exchange man-in-the-middle dictionary-attack ipsec

asked Aug 10 '15 at 0:30

Robert Siemer

1411 silver badge5 bronze badges

2

votes

1answer

1k views

XOR cipher with three different ciphertexts and repeated key, key length known. How do I find the plaintexts?

Let us say we have three different plaintexts (all alphabets, A-Z): $x$, $y$ and $z$, each of length $21$. Let the key, $a$, be also of length $21$. Now, what we have is $x \oplus a$, $y \oplus a$ ...

stream-cipher xor dictionary-attack

asked Feb 1 '15 at 8:57

Prasoon Shukla

234 bronze badges

3

votes

3answers

580 views

SRP-6 vulnerabilities when N is small

I'm one of the developers of an application which uses SRP-6 as the authentication mechanism. The authentication part of the code is very old and uses N with only 256 bits (all arithmetic is done in ...

discrete-logarithm brute-force-attack srp dictionary-attack

asked Aug 18 '14 at 20:05

Gavriil Pascalau

333 bronze badges

2

votes

2answers

792 views

What is the entropy per Diceware word if a random symbol is inserted into a random position in the word?

On the Diceware page is this little gem: For extra security without adding another word, insert one special character or digit chosen at random into your passphrase... Inserting a letter at random ...

passwords entropy dictionary-attack

asked Jul 14 '14 at 3:59

user7024

1

vote

1answer

88 views

Problem with anonymously merging information from distributed sources

Some Background: There is an entity with an identifier and some information. The identifier of this entity is a string with a known scheme/pattern(Which means the total number of such possible ...

hash multiple-encryption dictionary-attack

asked May 23 '14 at 16:14

MickJ

1115 bronze badges

3

votes

2answers

429 views

Does impersonating an SRP server give you enough information for an off-line dictionary attack?

In a comment to an answer I wrote to another question, CodesInChaos wrote that: "Problem with SRP is that an attacker who impersonates a server learns the password hash, enabling offline search.&...

brute-force-attack dictionary-attack srp

asked Aug 9 '13 at 17:39

Ilmari Karonen

42.9k3 gold badges96 silver badges168 bronze badges

-1

votes

1answer

879 views

Obtaining a key that's using ice algorithm

I have a text file that has been processed by the SNOW steganography tool that uses ICE encryption. However, I do not know the key that would enable me to decrypt and retrieve the message hidden. ...

brute-force-attack dictionary-attack steganography

asked Feb 7 '13 at 20:01

user4981

11 bronze badge

0

votes

1answer

418 views

Zero Knowledge auth schemes with weak secret

In Zero Knowledge auth schemes the public DH factor of each peer is encrypted with a potentially weak pre-shared secret and the resulting ciphertexts are exchanged over an insecure channel. Why is no ...

diffie-hellman zero-knowledge-proofs dictionary-attack

asked Aug 21 '12 at 11:10

niklr

1032 bronze badges

1

vote

1answer

875 views

What would be the most effective way to brute force a 16 char AES key?

I have a file that is encrypted in AES using a 16 char string. The string is (a-zA-Z0-9) and .,?!. Also, it only contains words ...

aes brute-force-attack dictionary-attack

asked Jul 28 '12 at 23:05

Alexander Forbes-Reed

1111 bronze badge

10

votes

1answer

2k views

How realistic is a dictionary attack on a secure remote password protocol (SRP) verifier?

I'm deploying a secure remote password protocol implementation and I'm wondering what the consequences are when the client generated verifier gets leaked to an attacker. I've read Thomas Wu's paper ...

zero-knowledge-proofs dictionary-attack srp

asked Mar 20 '12 at 23:29

Grant BlahaErath

3251 silver badge9 bronze badges

15

votes

5answers

5k views

How can rainbow tables be used for a dictionary attack?

I'm putting together a password policy for my company. I very much want to avoid requiring complex passwords, and would much rather require length. The maximum length I can enforce is 14 characters. ...

hash passwords dictionary-attack rainbow-table

asked Oct 25 '11 at 21:49

Mitchell Kaplan

2832 silver badges7 bronze badges

2

votes

3answers

3k views

Dictionary attack on pass-phrases on common algorithms?

I don't yet perfectly understand the difference between brute-force and dictionary attack since this differentiates one attacking the key and another attacking password: apparently attacking passwords ...

passwords brute-force-attack dictionary-attack

asked Aug 21 '11 at 23:53

jokoon

6931 gold badge6 silver badges13 bronze badges

Stack Exchange Network

current community

your communities

more stack exchange communities

Questions tagged [dictionary-attack]

Crack AES encryption via passphrase dictionary attack?

Could PAKE via smooth projective hash function protect agaist replay attacks?

Does having a hash of a password jeopardize the security of plaintext that was encrypted with that password?

Argon2id benchmarks

Why isn't Kerberos using temporary keys to avoid dictionary attacks?

Performing a dictionary attack on RSA/ECB with no padding

Is forward search attack is the same as dictionary attack?

How to prove that a rainbow table is complete?

Passphrases, Dictionary attacks and 'bit shift'

Does a password that's cracked someone's account increase the chances of cracking someone else's account?

Why does the Secure Remote Protocol have resistance of dictionary attack?

What are the problems of IKEv1 aggressive mode (compared to IKEv1 main mode or IKEv2)?

XOR cipher with three different ciphertexts and repeated key, key length known. How do I find the plaintexts?

SRP-6 vulnerabilities when N is small

What is the entropy per Diceware word if a random symbol is inserted into a random position in the word?

Problem with anonymously merging information from distributed sources

Does impersonating an SRP server give you enough information for an off-line dictionary attack?

Obtaining a key that's using ice algorithm

Zero Knowledge auth schemes with weak secret

What would be the most effective way to brute force a 16 char AES key?

How realistic is a dictionary attack on a secure remote password protocol (SRP) verifier?

How can rainbow tables be used for a dictionary attack?

Dictionary attack on pass-phrases on common algorithms?

Hot Network Questions

Questions tagged [dictionary-attack]

Related Tags