Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ecies]

Elliptic Curve Integrated Encryption Scheme (ECIES) is a public key encryption system proposed by Victor Shoup in 2001. It uses hybrid cryptography using ephemeral-static Diffie-Hellman together with an unspecified symmetric cipher.

1
vote
0answers
29 views

Why doesn't the JOSE suite/JWA include ECIES?

The JOSE suite specifics use of RSA-OAEP (for when one party has an RSA key) and ECDH (for when two parties have EC keys) in JWA. Why doesn't it include ECIES? It seems like a way to derive a key ...
0
votes
0answers
51 views

Could be generated a symmetric key for every message?

I would like to use IES (x25519 and AES-GCM), but every message used a new session key, does that affect the performance of the system? do I need to used session key to refer to the key that used by ...
1
vote
1answer
48 views

Plaintext Size Limit for ECIES with AES-128 CBC mode

Using the ECIES (Elliptic Curve Integrated Encryption Scheme), is there a limit size of plaintext? (what is the maximum allowed number of bytes to be encrypted with ECIES).
2
votes
2answers
90 views

Is it secure to encrypt a 1 GB data file with AES-CTR by ECIES?

I have a file system with share resources over the network (like a shared FTP) Is it possible to use the client's ECC public key to encrypt the AES key, and then use the AES in CRT mode for the file ...
0
votes
1answer
66 views

Ethereum RLPx protocol for inter-node communication - flaws in the encryption

Ethereum uses RLPx/devp2p for inter-node communication. The protocol is encrypted using Elliptic Curve Integrated Encryption Scheme (see ref) Under Known-Issues I found this paragraph: The RLPx ...
2
votes
1answer
52 views

Are the following asymmetric encryption schemes equivalent?

Consider the scenario where you want a machine to be able to send daily encrypted backups to a storage server. You'd prefer to not use simply a symmetric key for encryption, because if the machine ...
0
votes
2answers
82 views

Do I need to know the curve for ECIES decryption?

Let's assume that I have key pair generated using the following curves: brainpoolP256r1, brainpoolP320r1, brainpoolP384r1 or brainpoolP512r1. Do I need information which curve was used to decrypt ...
1
vote
0answers
101 views

How does IES compare versus AES and RSA? [closed]

How does IES compare versus AES and RSA in terms of speed and security?
2
votes
2answers
51 views

Offline authenticated encryption for pub/sub

Requirements: only publisher can create messages publisher & subscriber can both read messages and authenticate the publisher offline message transfer messages can't be read by non-participants ...
1
vote
0answers
65 views

ECIES Authentication

In the ECIES scheme, the sender generates an ephemeral public key per each message it encrypts. This public key, together with the receiver's private key, is used in order to generate a shared secret ...
2
votes
2answers
287 views

ECIES need for KDF

Reading the ECIES algorithms (and elgamal in general), the general wisdom is to use a KDF and MAC on the shared secret before using it for encryption of ciphertext. I suspect, however, this was ...
0
votes
1answer
158 views

Differences between ECIES and DHIES

I'm studying the Integrated Encryption Scheme and I did't understand which are the main differences between ECIES and DHIES. Can someone help me ? Thank you in advance.
3
votes
1answer
132 views

ECIES: ECDSA with Kmac and without MAC

I have couple of questions about ECIES. I understand how ECIES work and what I must do if I want to have ECIES with ECDSA for authentication (I understand that for full authentication I have to have ...
3
votes
1answer
124 views

Ciphertext size of RSA, ELGamal, and EICES encryption

I have to make a choice based on the minimum stored data, so I would like to know which encryption protocol is better in terms of the size of the resulting ciphertext for very short plaintexts (8 to ...
2
votes
2answers
216 views

ECIES with ECDSA

I understand how ECIES work. I have a structure of message [alice`s ephemeral public key, MAC tag, ciphertext] I do not understand what I shoud do if I want to ...
1
vote
1answer
184 views

Is there a proxy re-encryption algorithm for Elliptic Curve ECIES?

I was wondering if there is a way to perform proxy re-encryption for ECIES public-key encryption (i.e. given a message encrypted with Alice's public key, re-encrypt it using Bob's public key). Is that ...
0
votes
0answers
67 views

ECIES encryption output with additional parameters

Although I can't recall the source, I've seen somewhere a block diagram of the encryption process in ECIES, where apart from the standard outputs of the ...
1
vote
1answer
71 views

Do you need to MAC an ECIES message?

Normally, when decrypting messages, you need to check if the message is authentic and integral (aka, never decrypt before checking the MAC). With ECIES, this seems to be done internally. Is it ...
1
vote
1answer
200 views

ECIES for not shared encryption

I am using ECIES (Cryptobox as poncho pointed out) for public key encryption with ECC between Alice and Bob with secret/public keys $(a,A)$ and $(b,B)$ respectively. So Alice encrypts to Bob with $$ ...
-1
votes
1answer
124 views

ECDH can be used for Key Agreement(KA) as per ECIES specification?

I want to implement a library to provide ECIES (Elliptical Curve Integrated Encryption Standard). We could see DH can be used as KA function for ECIES. I want to know specifically the ECDH (Elliptic ...
1
vote
1answer
446 views

How to extract MAC and AES keys using x9.63 based kdf

For trying ECIES, I need to derive keys for MAC and AES from the shared secret using ANSI x9.63 based KDF. The information on key derivation I got it from Section 3.6.1 of http://www.secg.org/sec1-v2....
0
votes
1answer
67 views

Does this ECIES scheme make MAC redundant?

I've implemented ECIES (see the below pseudo-Python). ...
3
votes
3answers
555 views

Is EC integrated encryption scheme used in practice?

I know ECDSA and ECDH are used a lot but what about the ECIES? Is it used or specified as an option in any protocol?
2
votes
1answer
170 views

ECIES public key distribution

I am trying to implement ECIES (using BouncyCastle and FlexiProvider) across mobile app and server communication whereby the mobile app will encrypt a data and server will decrypt the same. Now how ...
3
votes
1answer
503 views

What's the ASN.1 structure of ECIES encryption result? [closed]

I got a ECIES encryption result and a publickey,the publickey after decoding to ASN.1, I obtained the following: ...
2
votes
1answer
184 views

How do i avoid random output in ECIES encryption and Elgamal encryption as well?

I have a case where to ensure the same encrypted string for the given input. Say for example If "Hello" is encrypted more than one time then same encrypted string should be i should get as an output (...
3
votes
1answer
341 views

Is IV needed in ECIES?

Is IV needed in ECIES (Elliptic Curve Integrated Encryption Scheme) used with AES-CTR? The ephemeral key pair is generated randomly therefore the encryption key derived from the public key must be ...
0
votes
1answer
112 views

Sign + ETM in ECIES

Using ECIES in a file encryption protocol, I need to authenticate the sender, so I'm using ECDSA, and I'm wondering if signing the ephemeral public key(needed by receiver to derive the shared ...
0
votes
1answer
196 views

Implementing Inferno's ECIES: Creating a symmetric key from sender's public key [closed]

I'm coding(in C#) an offline(no network or server), hybrid file encryption app, implementing Inferno's ECIES. The user's private key is to be stored either on the pc drive or on a usb key, after ...
0
votes
1answer
233 views

Differences between AEAD and ECIES when transmitting secret messages

I wonder what are the practical differences between using Authenticated Encryption and then ECIES. It looks like both require communicating the shared secret in some fashion between the parties and ...
0
votes
1answer
237 views

ECIES is must with Symmetric?(ECIES-AES or ECIES-TDES)

I can't understand the ECIES algorithm. I saw two different ECIES algorithms: Using only Public key Key generation: $A_{pri} : n_A$ $A_{pub} : n_A G$ $B_{pri} : n_B$ $B_{pub} : n_B G$ ...
2
votes
1answer
107 views

Does SIV mode work for asymmetric encryption?

In ECIES and similar asymmetric schemes, is it possible to use a hash of the plaintext as the IV?
1
vote
1answer
336 views

A standard extension of ECIES for multiple recipients (broadcast / multiparty)?

I have one sender, and a small number (~5) of recipients. The sender knows each recipient's public EC key. I want the sender to broadcast a single message in such a way that any one of the recipients ...
4
votes
2answers
719 views

Why is ECIES complex?

Wouldn't encrypting a message with AES, then encrypting the (randomly generated) AES key and IV with the EC public key suffice? What attack vectors does ECIES protect against, that an AES-then-EC-...
2
votes
1answer
768 views

ECIES with AES-GCM

The Elliptic Curve Integrated Encryption Scheme (ECIES) describes how to derive a "temporal" key, encrypt a message (eg. using AES) and creating a MAC. However, from my understanding using AES in GCM ...
3
votes
0answers
130 views

ECIES: Purpose of optional shared information?

According to Wikipedia the ECIES algorithm has two optional shared information $S_1$ and $S_2$. They are used as follows: Generate a random shared secret $Z$ according to ECIES, which will never be ...
2
votes
1answer
422 views

ECIES: Purpose of MAC?

Assumptions: $A$ wants to communicate with $B$ $A$ knows a public key $P_B$ which is trusted by a third party and belongs to $B$ $A$ knows the address of someone who pretends to be $B$ $A$ wants to ...
4
votes
3answers
609 views

Does ECIES imply authenticity?

Assume: Alice and Bob both generate separate EC keypairs Alice obtains Bob's public key, and together with her private key creates a shared secret key Alice encrypts a message using the shared key ...