Questions tagged [encryption]
Encryption is the process of transforming plaintext using a cipher into ciphertext to make it unreadable to anyone except those possessing the key. Decryption is the process of transforming that ciphertext back into plaintext, using the key.
4,567
questions
0
votes
0
answers
14
views
Is there a multi-key encryption and decryption algorithm that allows key revocation?
I have private data and I want to encrypt it to share it with some users who should be able to decrypt it. Therefore, I need multiple keys to decrypt it. But, I also want to be able to revoke a key to ...
0
votes
1
answer
40
views
Securely computing the addition of n numbers owned by n people
Assume that we have n people each owning a secret number. Now we want to collaboratively compute the addition of all these numbers without anyone revealing their numbers. Then the result will be made ...
- 101
1
vote
1
answer
42
views
Why is static-static diffie hellman needed in Noise_IK?
TL;DR: Why is there a static-static diffie hellman in the Noise_IK handshake?
Hi,
I am currently trying to understand the WireGuard VPN protocol.
As you may know, it uses the Noise_IK handshake from ...
- 13
2
votes
0
answers
28
views
How many ciphertexts should attacker intercepts if he only knows the first 3 bytes of plaintext of each one?
Consider a system in which DES is used to encrypt messages in which the first three plaintext Bytes are known by the attacker. How many encrypted messages is it necessary to intercept in order to be ...
- 143
-1
votes
0
answers
21
views
When to use Symmetric over Asymmetric [closed]
When would it be advisable to use Symmetric over Asymmetric encryption or vice-versa?
-2
votes
0
answers
26
views
Decrypt the question [closed]
Ybx nvvr jlc uisimyj esifucszm ilfgjmlyj sk cgzfvrumcfr tl xhvvls mlrrxzxl klfn tlv gzlkyexqs nhvbuftceii cg nvvrm hz brtqg jycxcvuc sw vbicslcvuc qjwauemxgl. Nns aukcrrym hz gwn uky gvjwhaemychh (...
- 1
-2
votes
1
answer
52
views
Security of Symmetric vs Asymmetric Encryption [closed]
Which one is more secure Symmetric or Asymmetric encryption?
-1
votes
0
answers
38
views
New to cryptography and looking for some basic help [duplicate]
I am just getting in to cryptography and just started learning about CAA secure techniques. For the four below I was hoping I could get a basic explanation on them and why one would be used over the ...
- 1
-1
votes
0
answers
47
views
Symmetric Encryption algorithm [closed]
I am working on designing new symmetric encryption algorithm like DES. It should be block size. What are recommendations functions should be used and what are other recommendations!!!!
2
votes
0
answers
17
views
Anonymity in initial Key exchange in onion routing [migrated]
Maybe I will be wrong, please correct me and at the same time answer my question. I know the keys are exchanged between client and Tor relays through circuit extension requests (other than first relay)...
- 53
1
vote
0
answers
80
views
Stuck on Decrypting with RSA and SHA256 in Encryption Task
I'm working on solving a encryption task, and I'm a bit stuck. I want to clarify that I'm only seeking hints and not direct answers since I want to solve it myself. The goal is to solve it on my own; ...
- 111
1
vote
1
answer
46
views
Secure encryption in the presence of a keyservice
Imagine this scenario:
On a particular PC is a service that provides cryptographic functions -- in particular AES-CBC and ECC (ECIES/ECDSA).
The service provides access to a single key stored in an ...
- 113
3
votes
1
answer
408
views
How does TLS 1.3 restrict the Diffie-Hellman parameters to ones that are known to be secure?
In previous versions of TLS, the choice of the Diffie-Hellman parameters was up to the participants. This resulted in some implementations choosing incorrectly, resulting in vulnerable implementations ...
- 53
1
vote
1
answer
46
views
Threshold Paillier encryption key generation time
I have used the threshold version of Paillier encryption without a trusted dealer in an application. I have tested the key generation phase with different security key sizes such as 80, 512, 1024, and ...
- 11
1
vote
0
answers
17
views
Issue with AWS Encryption SDK for JavaScript in Browser: 'Buffer is not defined' [closed]
I'm trying to implement AWS Encryption SDK for JavaScript in a browser environment within a React application. When I attempt to construct an instance of the encryption client using buildClient ...
1
vote
1
answer
54
views
AES CBC with random IV but key from PBKDF2 with same salt
TL;DR: Is encrypting data with AES CBC with random IV + PBKDF2 key using the username as salt safe?
I have searched the internet, but I could not find a proper answer that encompasses the "AES ...
1
vote
1
answer
57
views
Enigma Questions: Eliminating the can't encode to itself flaw? Maybe not a flaw
I am currently writing a paper in my old age for the fun of it. I feel that the enigma machine had gotten a bad wrap for some of its flaws. I decided to write a machine simulation to see if I can ...
0
votes
0
answers
15
views
PGP key pair - How to set up for multiple users to decrypt messages with Kleopatra [migrated]
This is my first project of this nature, and I am hoping this is a basic use case for PGP encryption. Please forgive my ignorance!
There is a server being configured by a service provider (SP). The SP ...
- 101
1
vote
1
answer
36
views
Forming ECC key (TLS) in X9.63 format
I am studying TLS handshaking by example a program tlse, which uses libtomcrypt library.I see that in line 5236 (link above) the program call libtomcrypt procedure ...
- 81
1
vote
1
answer
62
views
Cryptography particular block length valid message
I am new at cryptography and start to learn some terms. I just saw an question in the book and didn't got a clue about this question. Could someone can explain me the answer of this question? Because ...
- 31
2
votes
1
answer
55
views
Are passkeys actually hardware keys or are they just reversibly encrypted keys secured by a hardware key?
Passkeys have this complicated QR code + Bluetooth dance to enroll a new device which seems like it ought to be securely creating a key on the device in a TPM.
However the messaging around "sync&...
- 121
1
vote
0
answers
69
views
Is there a good website to circulate RFCs [closed]
I'm drafing an RFC for a low computation crypto algorithm, intended for low power bluetooth communication. Likely without a connection using advertisements only.
It's going to include raw C code ...
- 11
-6
votes
1
answer
71
views
Are Schnorr's algorithm really subject to q-computer attacks?
I was wondering whether quantum-computers really break Schnorr's signature scheme. Schor's algorithm works via the quantum Fourier transform, which reveals the cycle time and thus phi. However, with a ...
0
votes
0
answers
59
views
Password Manager desktop app
I have built a small password manager desktop app using python. This app falls under the master-password model.The app connects to two databases stored locally. The first database stores the users ...
- 1
1
vote
1
answer
88
views
Can I use Argon2 to encrypt data?
Normally I use Argon2 to generate an encryption key, and then use AES to encrypt data with that key.
Can I just set the hash size to be equal to the data size, set the associated data to a random ...
- 11
2
votes
1
answer
65
views
Can you re-encrypt data without knowing what the data is or using PRE?
I'm currently working on a distributed consensus-based system. I currently give the system a private key through a threshold encryption model, and I want to be able to take some data encrypted with ...
- 21
0
votes
1
answer
69
views
How can I send someone a large file safely without using key exchange protocols (for encryption)?
I recently took an exam where one of the questions was roughly the following:
You need a specific way for sender S to send a large file M to a receiver R with their secret-public key pair, without ...
- 23
2
votes
1
answer
55
views
Is a Pedersen commitment still secure when r is either 0 or 1?
Specifically if we know the $r$ takes values from the set $\{0,1\}$and $c=g^r*h^m$ does the hiding property still hold? I think I already managed to prove that the binding property holds due to the ...
- 23
2
votes
1
answer
102
views
Best practices on implementing a password manager
I'm a dev new to security and cryptography.
I'm writing a password manager and Time-based OTP combo in dart/flutter to use in multiple devices and platform for fun and use it personally for real. I ...
0
votes
0
answers
35
views
Shortest encryption with URL-friendly character set
I need a way to encode a set of information in a way that the result would be as short as possible with a requirement of it being usable as part of URL string.
I don't really care that much about ...
- 101
2
votes
1
answer
90
views
Padding Oracle Attack - Decrypting First Block with Static IV
I'm trying to understand the exploitability of the padding oracle attack, which enables someone to decrypt and encrypt the contents without knowing the encryption key.
Can encrypted data with the ...
- 23
2
votes
1
answer
87
views
Hiding sum of vectors. Hardness based on CVP
This is the problem
Let $\mathcal{L}$ be a lattice and $v_1,v_2,\ldots,v_n\notin\mathcal{L}$. Given the values $a_1,\ldots,a_n$ such that
$$a_1=\lfloor v_1\rceil+v_2+\ldots+v_n$$
$$a_2=v_1+\lfloor v_2\...
- 147
4
votes
0
answers
58
views
TPM - Ecc based encryption / decryption using the public key
Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
- 766
2
votes
1
answer
77
views
Double Ratchet Algorithm: Active Man in the Middle Attack without Root-Key or Ratchet-Key
I am currently studying the Double Ratchet Algorithm from Signal (link to the documentation). I stepped over a security issue which I was not able to find that it was mentioned anywhere.
I assume that ...
- 308
2
votes
0
answers
15
views
When can the types of data be distinguished during the addition of encrypted data to a deterministic encrypted data set with equal proportions?
This question is about adding new data with different proportions to a dataset with equal proportions for each type of data, and determining at what point the added data can be distinguished.
For ...
- 31
2
votes
0
answers
48
views
To prove equality/inequality of plaintexts of 2 ciphertexts encypted under different encryption schemes
We have 2 ciphertexts, one encrypted using Paillier and another encrypted under Elgamal encryption schemes. Is there a way to design ZK-proof to prove equality of the underlying plaintexts of these 2 ...
- 21
3
votes
1
answer
241
views
What is the post-quantum security of encryptions schemes based on transpositions?
I know that if using Grover's algorithm to break a cipher, one would need to perform (2^[key space])^0.5 queries (the square root of the number of all possible keys).
A simple transposition cipher ...
- 181
4
votes
1
answer
81
views
In what way, does adding dimensions to lattice based cryptography decrease vulnerability to quantum computers? and why?
In RSA encryption, the larger the size of the prime numbers utilized for the creation of the public key, the more computational power is required in order to "Brute force" decryption.
Does ...
2
votes
1
answer
85
views
Does having more than one HMAC provide more information to the attacker?
Suppose $N$ many messages has been sent from $A$ to $B$ in this format:
$\operatorname{HMAC}(K, C(i)) \mathbin\| C(i)$.
Where
$C(i)$ is some cipher-text encrypted with some secure algorithm using ...
0
votes
1
answer
84
views
Is that possible for local p2p connection with encryption and remote p2p connection with encryption within the same application?
on the wiki page of Rustdesk, it states "the connection is unecrypted, please do not send us issue about this." for local direct IP.
BUT, Rustdesk is intended "Virtual / remote desktop ...
3
votes
1
answer
106
views
What is the result of not connecting the 1st register to the xor gate in LFSR?
I designed 8 bit lfsr in vhdl. According to mathematical theory, I xor processed the outputs of registers 1, 4, 5, 6 and 8 and connected them to the input of register 1. theory says that if I give the ...
2
votes
1
answer
46
views
Storing length of encrypted data
I need to encrypt some user's data. However to make it more apparent to the user what data is stored in each key, I was thinking to also store the length of the actual data along the cipher.
E.g.
<...
- 121
1
vote
0
answers
231
views
DES in cipher feedback mode CFB
We use DES in cipher feedback mode (CFB) to encrypt a plaintext $m = m_1\mathbin\|m_2\mathbin\|\ldots\mathbin\|m_{100}$ into a ciphertext $c_1\mathbin\|c_2\mathbin\|\ldots\mathbin\|c_{100}$, where ...
- 11
2
votes
1
answer
44
views
How to determine if a bilinear map satisfies XDLIN?
Let $\{(q, G_1, G_2, G_T, e: G_1 \times G_2\to G_T)_s\}$ be a family of bilinear groups parameterized by the security parameter $s$. We use $g_1$ (resp. $g_2$) to denote the generator of $G_1$ (resp. $...
- 121
1
vote
3
answers
136
views
Given the existence of provably-hard-to-solve problems, why do we routinely rely on conjectured-to-be-hard problems for encryption?
Let $(X, Y, Z)$ be a set of binary strings of length $n$. Let random $X$ be the private key for encoding (or decoding) message random $Y$ as $Z$. Let the encryption algorithm $m$ be a matching ...
- 139
3
votes
0
answers
36
views
Why Pr[C = 1∣M = a] = 1 ≠ 0 = Pr[C = 1∣M = b]?
The statement is false. We show this by providing a counter-example.
Define
M = {a, b},
K = {k1, k2},
C = {0, 1}.
Let Enc(k, a) = 0 and Enc(k, b) = 1 for k = k1, k2.
Dec algorithm will return an on ...
- 31
2
votes
1
answer
100
views
AES encryption IV that won't need to be stored
I'm trying to implement an IV that won't need to be stored on it's own.
I'm considering 3 options:
Since I'm using PBKDF to generate a key I could use some bytes from the generated hash
I could use ...
- 23
2
votes
1
answer
111
views
Attack on the chosen plain-text RSA
Reading another user's question, a doubt came to me.
Suppose an RSA oracle exists, with which it is possible to interact to encrypt and decrypt some text. The oracle output is not the decrypted text ...
- 33
1
vote
0
answers
24
views
How can I perform a one-client MITM attack in a Diffie-Hellman key exchange? [closed]
Suppose we have intercepted a public key exchange (via Diffie-Hellman protocol). In addition to the keys A and B, the generator g and the module p are known.
Assuming that it is possible to exchange ...
- 11
2
votes
0
answers
55
views
How can I extend the RSA LSB Oracle attack, to n-LSBs?
Suppose we have an RSA-Oracle that can encrypt and decrypt our input. The the decryption output is equal to: $ (C^d \mod N) \mod 2^n $.
How can I extend the LSB oracle attack, using the using ...
- 21