Questions tagged [entropy]

Entropy is a measure of how predictable the outcome of a random process is, or how much uncertainty one has about an unknown quantity in one's state of knowledge, defined in terms of the probability distribution on possible outcomes or quantities.

Filter by
Sorted by
Tagged with
5
votes
0answers
153 views

Where did Whitfield Diffie say "If you can make random numbers, you can have a private conversation"?

I've seen the following (alleged) quotation on this site and other places:- If you can make random numbers, you can have a private conversation. -Whitfield Diffie. Yet we (Google & me) can't ...
2
votes
0answers
51 views

Could anybody help by applying a secure multiparty secret sharing scheme?

Suppose that we have a multi-secret sharing scheme as it is described in the literature Let there be $I$ agents and say that $S$ is the space of the (uniform) random variables $s=(s_1,s_2,\cdots,s_I)\...
0
votes
1answer
39 views

Is the Secret sharing scheme thresholds of variable of interest shared related with the entropy of the variable?

Is the $t$ out of $n$, namely $(t,n)$, threshold in the secret sharing scheme related to the entropy of the random variable that is shared according to the scheme? What changes in the secret sharing ...
1
vote
2answers
68 views

Why Entropy to be defined as Joint Probability Distribution Sum?

From Stinson's book, during the demonstration of the following Theorem which says: $H(X,Y) \leq H(X) + H(Y)$, with equality if and only if $X$ and $Y$ are independent random variables. The author ...
1
vote
0answers
18 views

How can a generate a key with defined key size with a hash function with its security/internal state shorter than the key?

Let's suppose I took a high resolution photo full of entropy and I want to convert in a key with 2048-bits of security. Practically all the known hash algorithms have maximum 512-bits of security. Is ...
2
votes
2answers
135 views

Entropy of SIM PIN code

Each mobile SIM card has a four-digit number ($b_1$,$b_2$,$b_3$,$b_4$) called PIN code. Each digit $0 \le b_i \le 9$ (for i = 1, 2, 3, 4) is generated using a random 16-bit sequence as follows: $b_i=(...
3
votes
2answers
424 views

Difference between Non-uniformly random and Uniformly random

I am reading up on Key Deriving Functions (KDF) and in a section of the Real-World Cryptographic book by David Wong, a comparison is being made with Pseudorandom number generator (PRNG). And one of ...
1
vote
2answers
117 views

Signature of low-entropy data: can they be faked?

I am working on an application where I have a physical product identification label containing a block of public, low-entropy data (~50 bytes) such as serial number and other info, all readily ...
0
votes
1answer
84 views

To what degree does a high PKBDF-HMAC-SHA1 iteration count compensate for a weak passphrase entropy?

Lost a LUKS-encrypted laptop at the end of 2019 and now trying to figure out the odds of a very sophisticated attacker being able to break in. The LUKS container was created mid-2017 with LUKS1 ...
2
votes
4answers
189 views

What can chaos provide to cryptography?

Chaos-based cryptography is facing a lot of criticism, however, some people argue that it can provide many cryptographic primitives, such as stream ciphers, block ciphers, hash functions, public-key ...
1
vote
1answer
121 views

Estimation of the entropy of keys derived from truly random numbers

NOTE: This question is based on my assumption that $X$ is a "truly random number" if and only if it's length measured in bits is equal to its entropy measured in bits. In other words, when ...
1
vote
1answer
36 views

l-Diversity logarithm

I wanted to make a little example for anonymization evaluation using l-Diversity. For that I'm using the following formula for Entropy l-Diversity ($E$ is the equivalence class, $S$ are all possible ...
3
votes
2answers
105 views

Don't human generated passwords used with key derivation functions reduce the security of symmetric encryption?

The key size for AES is chosen as 256 because that's considered the minimum keysize which can protect against a brute force attack - i.e. $2^{256}$ tries. However, in practice, for a lot of ...
2
votes
1answer
78 views

Does grouping password characters for readability decrease entropy?

For example, for a randomly generated password of 28 lowercase letters, which is about 128 bits of entropy, how would adding a space after every four characters affect it? ...
1
vote
1answer
48 views

Randomness extraction on correlated data in TRNG

True random number generator (TRNG) designs I read about mostly consist of two digital stages: Low-frequency sampling (of a physical noise source) Randomness extractor The noise signal is sampled at ...
2
votes
1answer
211 views

Randomness extraction from a Santha-Vazirani (semi-random) source

In a quest to better understand randomness extractors (in the context of TRNG post-processing), I read some papers about the von Neumann Extractor and Santha-Vazirani (SV-) sources. The von Neumann ...
1
vote
0answers
61 views

Correlations in ring oscillator PUFs

A bunch of silicon Physical Unclonable Functions (PUFs) designs rely on variations of the propagation delay (due to process variation) of signals in different path. In many cases, a challenge selects ...
4
votes
1answer
208 views

Use of scrambler LFSR for randomness extraction of semi-random source

I am using a linear feedback shift register (LFSR) in a scrambler configuration as a randomness extractor for a weakly random source. This source is semi-random (aka. Santha-Vazirani source): the bits ...
0
votes
1answer
153 views

Why Entropy is low for Python Fernet Encryption

I am using Fernet encryption from python cryptography.fernet and generated the key as below ...
4
votes
3answers
362 views

How to compute the dataset size required by dieharder tests?

I am trying to use the dieharder random number test suite. However, this suite requires massive amount of data (this paper claims 228GB for no rewinding for every test) for most of the tests. I'd like ...
0
votes
2answers
124 views

Does watching Youtube generate entrophy

Does watching videos (either online videos such as off youtube or saved locally) generate enough (if any) entropy to create secure encryption keys? I understand that some activities such as memory ...
2
votes
1answer
57 views

Does applying a "PushEntropy"-function increase security of a private key?

I was just reviewing the source-code of the NBitcoin-package. As far as i can see when you create a new bitcoin-keypair Key privateKey = new Key(); (without passing ...
1
vote
0answers
57 views

How efficiently can an attacker forge parts of a fingerprint?

If two devices do not trust each other yet, you can't simply send the correct fingerprint across: you have to manually verify it. I am looking into the security of comparing only random parts of a ...
1
vote
0answers
47 views

Exercise applying Leftover hash Lemma

Say that X is a (k; n)-source if $X\in\{0,1\}^2$, and the min-entropy of X is at least k. Answer the following questions: (i) Suppose that $l=128$; what is the minimal amount of min-entropy needed in ...
3
votes
1answer
136 views

How to ensure that a cryptographic implementation is reasonably sound/robust?

I know from the bottom of my heart how bad the idea of custom-crypto is. I absolutely concur with the recommendation that it should only be done by professionals who specialize in implementing crypto ...
1
vote
1answer
141 views

Low Encrypted Entropy on PDF File

Thank you for the answers, I have edited my questions. It is a known fact that encrypting the files increases the file entropy. You can see the average entropy values of encrypted and non-encrypted ...
1
vote
1answer
387 views

Should I calculate SHA-256 hash of a raw bytes of a token or it's hex encoding?

I have a system where I should generate a secret token for a user. The presence of a token is sufficient to grant access to some user-related data. I am generating a 4096 bit token from a ...
3
votes
3answers
217 views

Measuring entropy of a uniform distribution source

What is entropy? I do not understand it at all. One article states: When there is an equal chance for all items to appear, we have a uniform distribution. In uniform distribution the entropy is high....
0
votes
0answers
50 views

Quantum key distribution using BB84 protocol

Quantum key distribution using BB84 protocol. The Secure key rate $R$, is given by $$ \quad R=1 - 2h(e_b) \tag{1}\label{q1}$$ where $e_b$ is the quantum bit error rate (QBER), $h(x)$ is the Shannon ...
1
vote
0answers
99 views

In my opinion a lot of encryption paper have small contribution in terms of security improvements [closed]

I used to saw a lot of encryption papers that have small significance in security improvements especially in terms of entropy, histogram and coefficient correlation especially in image encryption. Why ...
1
vote
0answers
33 views

How is it possible to prove that Shanon entropy does not change applying any bijective function to X? [duplicate]

I was wondering how is it possible to mathematically prove that Shannon entropy does not change when applying any bijective function to X? For instance H(X) = H(f(X)) assuming that f is invertible and ...
0
votes
1answer
102 views

How to prove that permutation and substitution ciphers satisfy H(X) = H(Y) in Shanon Entropy?

I was not able to mathematically prove that all permutation and substitution ciphers satisfy H(X)=H(Y) if we say that Y is the set of ciphertexts while X is the corresponding set of plaintexts in ...
1
vote
2answers
593 views

Recovery Passphrase Collission for BIP-39 and BIP-44

Referring to the standards of [BIP-39] and [BIP-44]: a 'master password' consisting of 12 words uniformly selected from a 2048-word dictionary corresponds to 128 bits of entropy, that is then used as ...
0
votes
1answer
132 views

Shannon information entropy value of 64 bit data?

So basically i have a set of float data, its value ranges from -1.3117 to 1.7956 and then i convert this data into 64 bit binary value(assuming it is originally 64 bit double float). After that, i ...
0
votes
1answer
113 views

What Permutation Entropy really is?

I was wondering about what is permutation entropy(PE). Then, I came to know this paper which describes PE. Now, let's assume that we have a pseudorandom permutation that is generated using an entropy ...
0
votes
0answers
83 views

How does the entropy of $r$ influence the security of the one-time pad $F_k(r) \oplus m$?

In an one-time pad scheme, $s \oplus m$ is uniformly random for any $m \in \{ 0,1 \}^\ell$ if $s$ is uniform in $\{ 0,1 \}^\ell$. By the security of PRF, it seems to be secure to replace the truly ...
2
votes
1answer
118 views

How to verify the claim of entropy available made by Linux 4.5?

The Linux kernel has an entropy source and it estimates its amount of bits in the device /proc/sys/kernel/random/entropy_avail. How can I verify that this number ...
3
votes
2answers
408 views

Formula for bits of entropy per bit, when combining bits with XOR

Assume that bits $A$ and $B$ each have .5 bits of entropy per bit. The two-bit result of the concatenation $A‖B$ has 1 bit of entropy total, and it retains the entropy density of .5 bits of entropy ...
2
votes
3answers
184 views

Where can I find a sample of data with a known entropy to see how well NIST SP 800-90B does on it?

I'd like a sample of true random data from a source that has a known entropy. It's not easy to even produce true random data in sufficient quantity --- much less know the entropy of the source. For ...
2
votes
1answer
165 views

Why does it make sense to use min-entropy for measuring cryptographic random data?

Comments on Cryptographic Entropy Measurement seems to challenge the heart of NIST SP 800-90B, which proposes min-entropy as a conservative measure of entropy produced by hardware source. [The idea ...
1
vote
2answers
83 views

What adequate tools are available for estimating entropy?

This question seems to touch on the apparent fact that NIST SP 800-90B is not suitable for estimating entropy produced by sources that are not uniform, despite being IID or non-IID. It also seems ...
2
votes
2answers
117 views

Can I measure entropy through compression only?

Say I have a file containing words from the English language. Not meaningful text, just a repetition of a few words. The original size is 1559454 bytes and it is compressed by a certain program to ...
5
votes
2answers
422 views

What's wrong with NIST SP 800-90B?

NIST SP 800-90B offers various tests for estimating entropy. They also offer an implementation of these tests. With their program called ea_iid, estimating ...
0
votes
1answer
128 views

Is this cumbersome strategy to produce a ridiculously strong password valid?

I'm writing something where somebody wants to have a ridiculously strong password for a file and yet be sure that he will always be able to reconstruct it. The way I have thought of this might be a ...
6
votes
4answers
1k views

Bits of entropy needed to choose a random element from a list?

Suppose I want to choose a random element from a list of size $2^n$, for any integer $n$. (Here, random is to mean an equal probability of selecting every item.) My intuition says I'd need $n$ bits of ...
2
votes
3answers
138 views

Is it absurd to estimate entropy from a sample?

To tell the exact entropy of a source, all I need to do is to use Shannon's formula $\sum -p(i) \lg p(i)$, where $i$ is the $i$-th element of the alphabet emitted by the source. Therefore, the only ...
4
votes
2answers
188 views

Are the GPS coordinates a good source of entropy?

Are the GPS coordinates (latitude and longitude) a good source of entropy? If yes, why? If no, why? The question would investigate on the fact if the GPS location data can be used as source of entropy ...
0
votes
2answers
169 views

How to calculate the entropy for a fixed length random passwords which has restrictions on the type of characters used

If we have a set amount of usable characters, but no other restrictions on the potential characters in a completely random fixed length password, we can easily calculate the entropy by doing: $\log_2(...
1
vote
1answer
279 views

I do many searches but can't find any explanation about "AES analysis using entropy"

I found this scenario in CRYPTOOL2 templates but there is no explanation how entropy is used. There is just a short description "This template shows how to use a brute-force search to attack an ...
0
votes
1answer
109 views

Symmetric key validity hypothesis?

Can I use something like Shannon entropy to determine the suitability of a symmetric key? I found a symmetric key which wasn't generated using a CSPRNG and it had a very low Shannon entropy. I ran an ...

1
2 3 4 5
8