Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher into ciphertext to make it unreadable to anyone except those possessing the key. Decryption is the process of transforming that ciphertext back into plaintext, using the key.

Filter by
Sorted by
Tagged with
4 votes
3 answers
891 views

If I encrypt a plaintext with different keys for each block, will I have the same security as a one-time pad?

Let's suppose I encrypt an 1MiB plaintext with AES-256 in ECB mode but using different keys for each 16-byte block (I know this is weird but it's just an example). Remembering that a different 256-bit ...
alpominth's user avatar
  • 379
0 votes
1 answer
59 views

Combining decryption function with transformation in a way that can't be reversed

I have a program implementing a function $f$, and want to find a pair of functions $e$ and $h$ such that $h \circ e = f$, but $e^{-1}$ cannot be recovered from $h$. In other words, given some $e$-...
James's user avatar
  • 3
1 vote
2 answers
269 views

Why the Modulus and Exponent of the public key and the private key are the same?

Given a certificate .p12 I want to extract the public key, the private key and Modulus and Exponent both from the public key and from the private key. I am using PHP and OpenSSL functions As I ...
Jorge Palacios Zaratiegui's user avatar
2 votes
3 answers
607 views

Encrypt different inputs with different keys to obtain the same output

I'm researching to see if there is an algorithm that encrypts different inputs with different keys to produce the same output. So let's say I have 2 messages. ...
johnny 5's user avatar
  • 123
0 votes
0 answers
29 views

Genrerate n numbers based on a string [duplicate]

I wanna generate a list of numbers based on a unique string. They shouldn't be predicatble and every time to generate they are the same. Could someone help me pleeease :)?
Jonathan Krützel's user avatar
0 votes
2 answers
59 views

How to require possession of arbitrary data to decrypt a file?

I have pairs of files A and B both of arbitrary size and contents (for any pair of files, A could be significantly larger than B or vice versa). I want to be able to 'encrypt' A in such a way that I ...
825480793's user avatar
0 votes
0 answers
101 views

How to extract a private key from .PFX file to .PEM file using AES-GCM as a password-based encryption?

I'm trying to extract a private key from a .PFX file to a .PEM file format. I was able to do it using Aes128Cbc in either .NET or OpenSSL: .NET: ...
Davy Souza's user avatar
2 votes
1 answer
104 views

How to prove the correct decryption of several (ElGamal) ciphertexts in a batch?

I know how to prove the correct decryption of a (ElGamal) ciphertext. The above protocol is from the paper: Bootle J, Cerulli A, Chaidos P, et al. Short accountable ring signatures based on DDH[C]//...
user109993's user avatar
0 votes
1 answer
73 views

If we supply a random uuid4 hashed salt to Hashid, will it be considered secure?

Ideally, Hashids -: https://pypi.org/project/hashID/ are considered insecure and it is recommended that we should not use them for any sensitive functions. Though, is a HashId considered secure if we ...
CryptoInfo's user avatar
0 votes
1 answer
67 views

If encrypting with a hash function in counter mode, will the security of this scheme be at most minimal{input,output}?

It's possible to use a hash function as an encipherment scheme if used in counter mode. Let's suppose I take a 64-bytes (512-bits) seed/key and hash it concatenated with counters, and use it as a ...
alpominth's user avatar
  • 379
1 vote
1 answer
118 views

Is AES worse than OTP, if so is there proofs

My train of thought went, OTP is very secure if key is unknown because I am guessing the original message. AES on the other hand tells me I gave it the wrong key, and if I did I can just switch using ...
user avatar
2 votes
2 answers
141 views

Can we extract public key from signature created by RSA?

I know it's possible with ECDSA. How bout RSA?
user avatar
0 votes
0 answers
42 views

Symmetric and asymmetric encryption using the same encryption/decryption algorithm?

If we use the following notation: $$C = E(P, K_e)$$ $$P = D(C, K_d)$$ Where: $$E(), D(), C, P, K_e, K_d$$ are the encryption algorithm, decryption algorithm, ciphertext, plaintext, encryption key and ...
ESCM's user avatar
  • 101
0 votes
0 answers
57 views

How do I decrypt a key encrypted by my HSM under a ZMK?

I've generated a key using an HSM Thales PayShield and i have share it with a counterpart. I followed these steps: i generated key usign KG console command i use FK to form ZMK from clear components ...
MaXbeMan's user avatar
0 votes
1 answer
77 views

How to find the round key in AES 256

Can anyone explaine how to find the every 15 round key by the 64 hex digit master key of AES 256 please. I will be really greatfull
james's user avatar
  • 1
0 votes
1 answer
46 views

Are asymmetric encryption and decryption same function? [closed]

In asymmetric key encryption, we have 2 functions, encrypt(m,k) and decrypt(m,k), and 2 keys, ...
Juan's user avatar
  • 9
0 votes
0 answers
22 views

Is there a multi-key encryption and decryption algorithm that allows key revocation?

I have private data and I want to encrypt it to share it with some users who should be able to decrypt it. Therefore, I need multiple keys to decrypt it. But, I also want to be able to revoke a key to ...
javierhersan's user avatar
0 votes
2 answers
91 views

Securely computing the addition of n numbers owned by n people

Assume that we have n people each owning a secret number. Now we want to collaboratively compute the addition of all these numbers without anyone revealing their numbers. Then the result will be made ...
Justin Zhang's user avatar
1 vote
1 answer
83 views

Why is static-static diffie hellman needed in Noise_IK?

TL;DR: Why is there a static-static diffie hellman in the Noise_IK handshake? Hi, I am currently trying to understand the WireGuard VPN protocol. As you may know, it uses the Noise_IK handshake from ...
Henerii's user avatar
  • 13
2 votes
0 answers
34 views

How many ciphertexts should attacker intercepts if he only knows the first 3 bytes of plaintext of each one?

Consider a system in which DES is used to encrypt messages in which the first three plaintext Bytes are known by the attacker. How many encrypted messages is it necessary to intercept in order to be ...
Allexj's user avatar
  • 143
1 vote
0 answers
143 views

Stuck on Decrypting with RSA and SHA256 in Encryption Task

I'm working on solving a encryption task, and I'm a bit stuck. I want to clarify that I'm only seeking hints and not direct answers since I want to solve it myself. The goal is to solve it on my own; ...
Amir Hassan's user avatar
1 vote
1 answer
53 views

Secure encryption in the presence of a keyservice

Imagine this scenario: On a particular PC is a service that provides cryptographic functions -- in particular AES-CBC and ECC (ECIES/ECDSA). The service provides access to a single key stored in an ...
Miral's user avatar
  • 113
3 votes
1 answer
443 views

How does TLS 1.3 restrict the Diffie-Hellman parameters to ones that are known to be secure?

In previous versions of TLS, the choice of the Diffie-Hellman parameters was up to the participants. This resulted in some implementations choosing incorrectly, resulting in vulnerable implementations ...
user10433098's user avatar
1 vote
1 answer
55 views

Threshold Paillier encryption key generation time

I have used the threshold version of Paillier encryption without a trusted dealer in an application. I have tested the key generation phase with different security key sizes such as 80, 512, 1024, and ...
Tooba's user avatar
  • 11
1 vote
0 answers
54 views

Issue with AWS Encryption SDK for JavaScript in Browser: 'Buffer is not defined' [closed]

I'm trying to implement AWS Encryption SDK for JavaScript in a browser environment within a React application. When I attempt to construct an instance of the encryption client using buildClient ...
CreativeDesign's user avatar
1 vote
1 answer
81 views

AES CBC with random IV but key from PBKDF2 with same salt

TL;DR: Is encrypting data with AES CBC with random IV + PBKDF2 key using the username as salt safe? I have searched the internet, but I could not find a proper answer that encompasses the "AES ...
Daniel Aguiar's user avatar
1 vote
1 answer
79 views

Enigma Questions: Eliminating the can't encode to itself flaw? Maybe not a flaw

I am currently writing a paper in my old age for the fun of it. I feel that the enigma machine had gotten a bad wrap for some of its flaws. I decided to write a machine simulation to see if I can ...
DJ in Colorado's user avatar
1 vote
1 answer
74 views

Forming ECC key (TLS) in X9.63 format

I am studying TLS handshaking by example a program tlse, which uses libtomcrypt library.I see that in line 5236 (link above) the program call libtomcrypt procedure ...
LUN's user avatar
  • 85
1 vote
1 answer
67 views

Cryptography particular block length valid message

I am new at cryptography and start to learn some terms. I just saw an question in the book and didn't got a clue about this question. Could someone can explain me the answer of this question? Because ...
MariaDb's user avatar
  • 31
2 votes
1 answer
100 views

Are passkeys actually hardware keys or are they just reversibly encrypted keys secured by a hardware key?

Passkeys have this complicated QR code + Bluetooth dance to enroll a new device which seems like it ought to be securely creating a key on the device in a TPM. However the messaging around "sync&...
Luke Schlather's user avatar
1 vote
0 answers
69 views

Is there a good website to circulate RFCs [closed]

I'm drafing an RFC for a low computation crypto algorithm, intended for low power bluetooth communication. Likely without a connection using advertisements only. It's going to include raw C code ...
firesilver's user avatar
-6 votes
1 answer
84 views

Are Schnorr's algorithm really subject to q-computer attacks?

I was wondering whether quantum-computers really break Schnorr's signature scheme. Schor's algorithm works via the quantum Fourier transform, which reveals the cycle time and thus phi. However, with a ...
Luke Bright's user avatar
0 votes
0 answers
65 views

Password Manager desktop app

I have built a small password manager desktop app using python. This app falls under the master-password model.The app connects to two databases stored locally. The first database stores the users ...
StavrosN's user avatar
1 vote
1 answer
182 views

Can I use Argon2 to encrypt data?

Normally I use Argon2 to generate an encryption key, and then use AES to encrypt data with that key. Can I just set the hash size to be equal to the data size, set the associated data to a random ...
Alice's user avatar
  • 11
2 votes
1 answer
84 views

Can you re-encrypt data without knowing what the data is or using PRE?

I'm currently working on a distributed consensus-based system. I currently give the system a private key through a threshold encryption model, and I want to be able to take some data encrypted with ...
Marston's user avatar
  • 21
0 votes
1 answer
70 views

How can I send someone a large file safely without using key exchange protocols (for encryption)?

I recently took an exam where one of the questions was roughly the following: You need a specific way for sender S to send a large file M to a receiver R with their secret-public key pair, without ...
smitc29's user avatar
  • 23
2 votes
1 answer
60 views

Is a Pedersen commitment still secure when r is either 0 or 1?

Specifically if we know the $r$ takes values from the set $\{0,1\}$and $c=g^r*h^m$ does the hiding property still hold? I think I already managed to prove that the binding property holds due to the ...
GeorgeT's user avatar
  • 23
2 votes
1 answer
144 views

Best practices on implementing a password manager

I'm a dev new to security and cryptography. I'm writing a password manager and Time-based OTP combo in dart/flutter to use in multiple devices and platform for fun and use it personally for real. I ...
anthonychwong's user avatar
0 votes
0 answers
60 views

Shortest encryption with URL-friendly character set

I need a way to encode a set of information in a way that the result would be as short as possible with a requirement of it being usable as part of URL string. I don't really care that much about ...
mnj's user avatar
  • 101
2 votes
1 answer
218 views

Padding Oracle Attack - Decrypting First Block with Static IV

I'm trying to understand the exploitability of the padding oracle attack, which enables someone to decrypt and encrypt the contents without knowing the encryption key. Can encrypted data with the ...
VitoCorleone's user avatar
2 votes
1 answer
92 views

Hiding sum of vectors. Hardness based on CVP

This is the problem Let $\mathcal{L}$ be a lattice and $v_1,v_2,\ldots,v_n\notin\mathcal{L}$. Given the values $a_1,\ldots,a_n$ such that $$a_1=\lfloor v_1\rceil+v_2+\ldots+v_n$$ $$a_2=v_1+\lfloor v_2\...
Cristian Baeza's user avatar
4 votes
0 answers
77 views

TPM - Ecc based encryption / decryption using the public key

Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
TrinityTonic's user avatar
2 votes
1 answer
97 views

Double Ratchet Algorithm: Active Man in the Middle Attack without Root-Key or Ratchet-Key

I am currently studying the Double Ratchet Algorithm from Signal (link to the documentation). I stepped over a security issue which I was not able to find that it was mentioned anywhere. I assume that ...
p_1092131280's user avatar
2 votes
0 answers
15 views

When can the types of data be distinguished during the addition of encrypted data to a deterministic encrypted data set with equal proportions?

This question is about adding new data with different proportions to a dataset with equal proportions for each type of data, and determining at what point the added data can be distinguished. For ...
xiao's user avatar
  • 31
2 votes
0 answers
63 views

To prove equality/inequality of plaintexts of 2 ciphertexts encypted under different encryption schemes

We have 2 ciphertexts, one encrypted using Paillier and another encrypted under Elgamal encryption schemes. Is there a way to design ZK-proof to prove equality of the underlying plaintexts of these 2 ...
G Pavithra 's user avatar
3 votes
1 answer
247 views

What is the post-quantum security of encryptions schemes based on transpositions?

I know that if using Grover's algorithm to break a cipher, one would need to perform (2^[key space])^0.5 queries (the square root of the number of all possible keys). A simple transposition cipher ...
alpominth's user avatar
  • 379
4 votes
1 answer
88 views

In what way, does adding dimensions to lattice based cryptography decrease vulnerability to quantum computers? and why?

In RSA encryption, the larger the size of the prime numbers utilized for the creation of the public key, the more computational power is required in order to "Brute force" decryption. Does ...
Eugenio Kuri Student's user avatar
2 votes
1 answer
90 views

Does having more than one HMAC provide more information to the attacker?

Suppose $N$ many messages has been sent from $A$ to $B$ in this format: $\operatorname{HMAC}(K, C(i)) \mathbin\| C(i)$. Where $C(i)$ is some cipher-text encrypted with some secure algorithm using ...
CuriousCrypto's user avatar
0 votes
1 answer
213 views

Is that possible for local p2p connection with encryption and remote p2p connection with encryption within the same application?

on the wiki page of Rustdesk, it states "the connection is unecrypted, please do not send us issue about this." for local direct IP. BUT, Rustdesk is intended "Virtual / remote desktop ...
BenjaminC's user avatar
3 votes
1 answer
114 views

What is the result of not connecting the 1st register to the xor gate in LFSR?

I designed 8 bit lfsr in vhdl. According to mathematical theory, I xor processed the outputs of registers 1, 4, 5, 6 and 8 and connected them to the input of register 1. theory says that if I give the ...
Doğukan Karakaya's user avatar

1
2
3 4 5
93