# Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher into ciphertext to make it unreadable to anyone except those possessing the key. Decryption is the process of transforming that ciphertext back into plaintext, using the key.

4,284 questions
Filter by
Sorted by
Tagged with
10 views

### Creating a Password Generator using CSPRNG in React JS

I am building a password generator website using ReactJS (link). I have read a lot about various ways of generating cryptographically secure passwords and I have decided to go with using CSPRNG. I don'...
1 vote
22 views

### Sending encrypted message without public key from recipient (elgamal)

assume Bob and Alice use Elgamal encryption scheme. Alice wants to send Bob a message, but does not know Bobs public key. Is there a way for Alice to find out Bobs public key by receiving multiple ...
• 11
33 views

### Diffie-Hellman: how to solve an alternative of Diffie-Hellman given an algorithm that solves Square Diffie-Hellman?

A simple question. How can I proof the next polynomial reduction? : $DH’ ≤_{p} SQ$ where DH': given $g^{a}$ and $g^{b}$, compute {$g^{ab}$,$yg^{ab}$} where $y= g^{d/2}$, d is the order of cyclic ...
50 views

### What is a ciphering key?

In Hebrew language there is the term tzophen (צופן) which means cipher. There is also a term "maphtech hatzpana" (מפתח הצפנה) which means "ciphering key". What is a ciphering key? ...
52 views

### What is the difference between AES-CCM8 mode and AES-CCM mode?

I know AES-GCM and AES-CCM but what is the difference between AES-CCM8 mode and AES-CCM mode ? Is it the length of the cipher?
• 19
44 views

### Alternative to CBC mode encryption?

Given that CBC mode encryption is vulnerable to padding oracle attacks, what is the next best alternative ? a) Include a hash check in the API scheme, validate the hash and then proceed with CBC. If ...
• 178
25 views

### Simple scheme to publish data with a private key

The goal is for Alice to send an encrypted message to Bob. Neither Bob nor anyone else should be able to decode the message. Alice should be be able to decode it, when all data is shown to her. ...
35 views

### How to quantify privacy, when using homomorphic encryption?

How can you measure how secure or private the new variables are relative to the real (actual) variables. I want to compare homomorphic encryption and differential privacy in combination with machine ...
1 vote
115 views

• 47
41 views

### ElGamal-based BBS proxy re-encryption implementation?

are there any available tools/libraries that implement the idea of EIGamal-based proxy re-encryption scheme shown below? Preferably in Golang. Thank you! Source of this picture: https://www.cs.jhu....
• 47
1 vote
17 views

### multi-user deterministic symmetric encryption

I was wondering whether there exists a symmetric encryption scheme such that there is 1 sender and n receivers. Each receiver has 1 random and independent symmetric key. The sender knows the ...
• 145
116 views

### Public-key/asymmetric encryption where you can only leak the decrypted message by leaking your password

A bunch of friends are using public-key encryption to send encrypted messages to each other using an open public forum. I.e. each friend has a public key (which you can use to encrypt messages for ...
• 335
60 views

### Best way to encrypt sensitive data on server with HSM and symmetric keys

I need to store sensitive data (like customer photos) in a SQL database in the most secure way in case of security breaches. The data won't be accessed by the clients, only to internal processes that ...
• 1
24 views

### If I sign-then-encrypt a JWT, how does a 3rd party validate that the JWE message is valid?

Since it is preferred to sign-then-encrypt I was wondering how can another party validate that the message is valid? The use case I had was the following... Client authenticates and gets the access ...
42 views

### A doubt in pairing based cryptography

I have seen authors taking $G_1=G_2=G_T=G$ to be the same group of prime order $q$. What I know is that for pairing of type $$e:G_1\times G_2\rightarrow G_T,$$ size of the element in the target group ...
58 views

### Historical key sizes for RSA and discrete log [closed]

What is the historical pattern for key size increases for rsa vs discrete log? What are the current and future projected sizes for these?
• 872
56 views

### Bleichenbacher attack equation

In the Bleichenbacher attack, when the $|M_i−1| = 1$, we should choose $r_i >= 2(bs_{i-1} -2B)/n$ in order to increase the search performance. I don't quite understand how this $r_i$ value is ...
• 121
1 vote
55 views

### Why there is so high computational cost of multiplication in Microsoft Seal?

I was doing some Microsoft Seal testing on my macbook pro (i7) and got following results Coefficient mod $q = 100$ bits and Polynomial degree $n= 8192$ Ciphertext-Plaintext multiplication takes 0.211 ...
1 vote
85 views

### RSA Algorithm: What are the maximal possible locks that your friend can have so that he/she can secretly share that to you?

I found this question while preparing for exam. The question is Q)Suppose, you and your friends have a few numbers of locks and you all want to share that numbers among yourselves securely using RSA ...
60 views

### predict random keys using python [closed]

How can I write a program in python to predict the random key (urandom) that is used for encryption? I tried to search and I couldn’t find anything related to guessing and predicting urandom in python
• 17
47 views

### Generating multiple keys to decrypt one encrypted file

I've come across this particular design where I have one file encrypted. Then multiple people may want to access the file and I want to generate an individual key for each person, but each individual ...
3k views

### EC Public key encryption scheme where Alice does not know Bob's public key

I've found ECDH and ECIES, but those both require Alice to know Bob's public key and Bob to know Alice's public key in order to derive a shared secret. Now assume Bob knows Alice's public key $A$, but ...
83 views

### Encryption of message concatenated with encrypted message

Is there a possibility to encrypt a message that is a concatenation of an encrypted message and another message ( encrypt_message + message )?
17 views

### What is minimum size of polynomial modulus in Seal implementation of BFV?

Is there a way to get flexible parameters in Seal for batching? The issue is that for polynomial mod $n=4096$, the function I am computing has a multiplicative depth of $3~4$, to handle noise growth I ...
42 views

### Which is the smallest, cyclic in 3 directions, consistent structure of random values which can be hidden at the adversaries machine? (some comparison)

Or more general each member can be part of up to three 2D locally euclidean planes of 2 different dimensions. (each of those planes is cyclic in two orthogonal directions, like a torus) Given just ...
• 879
38 views

### How to understand noise growth in BFV?

I am trying to understand the noise growth due to multiplication in BFV encryption. As explained in section 4 and equation 3 of this paper: https://eprint.iacr.org/2012/144.pdf. I couldn't follow what ...
65 views

### Devising a Feistel cipher in which the subkeys are constructed badly so that a meet in the middle attack will compromise its security

I'm trying to find a Feistel cipher in which the subkeys are constructed badly so that a meet in the middle attack will compromise its security. I thought about trying out a cipher where all the ...
• 151
48 views

### Is there a way to modify an existing RSA key pair so that the functionality remains?

I have an existing RSA key pair, how to 'derive' a different key pair based on the existing one so that the encryption decryption functionality remains but the original key isn't interchangeable with ...
1 vote
50 views

### Separate Messages Encryption

In a public key system, Alice sends Bob separate messages telling him information about the time T and place P they would meet, encrypted with Bob's public key. What is the most secured protocol: <...
• 113
1 vote
63 views

### Would this hash based encryption algorithm work in theory?

I was just thinking about this and couldn't seem to find anything on it online. So the idea I had was this: Generating a random key of some length. Then hashing this key with SHA256 (or something of ...