Questions tagged [integrity]

In a cryptographic sense, integrity means unimpaired and complete.

Filter by
Sorted by
Tagged with
1
vote
2answers
104 views

Can a MAC be used as a HMAC?

I am reading through an information security book right now, and a confusing question poses itself to me: "Could you use a MAC as a HMAC? That is, does a MAC satisfy the same properties that a ...
1
vote
1answer
35 views

Integrity of format preserving Encryption

In this question regarding integrity of FPE, the main point of the answer is that: FFX is not malleable. [...] FFX can provide integrity protection in very limited circumstances. So I was ...
3
votes
1answer
184 views

Information security evaluation

I saw this exercise for evaluating the security(confidentiality, integrity, authenticity, and non-repudiation) of some schemes: ENC(M) || SignA(ENC(M)) ...
1
vote
2answers
97 views

SHA-3 for Integrity

We used to use CRCs to check the integrity of files. For safety analysis we could associate a probability for detecting a corrupted bit in a large file. Now we are using an RSA Signed SHA-3 hash for ...
1
vote
0answers
28 views

Keeping a backup of asymmetric keys with the help of a certificate authority without losing the privacy

First I'll explain the problem, then I will also give a solution(it might be wrong) I've found for it, you let me know what you think about this solution and whether you have a better one. Assume a ...
2
votes
2answers
243 views

Does stronger cryptographic hashes also imply being better at verifying integrity?

What I know so far Fact 1) I know that all cryptographic hash functions have the following properties They are many-to-one in nature They produce fixed size outputs Given an output ...
0
votes
3answers
216 views

AES, is this method to say “The password you entered is wrong” secure?

(TL;DR at the end) Let's say the plaintext hello is encrypted with AES (CFB mode). I noticed that decryption works no matter the given password! Of course if the ...
0
votes
1answer
94 views

Best method for checking integrity of 50 GiB files?

I'm making backups of compressed data (using ZPAQ), some compressed archives are large (50 GiB) I was just going to use sha3sum -a 512, for example: ...
0
votes
1answer
52 views

How reassuring is CRC-then-XTS as authenticated encryption?

It is known that the "xz" compression format embeds a checksum in the compressed file to verify integrity during decompression or standalone testing. The algorithm of the checksum can be one of: CRC32,...
0
votes
0answers
69 views

How to validate the authenticity and integrity of an XML document?

I am working on a C++ desktop application that reads an XML (also created by my org) from a public server (does not require authentication). I would like to make sure that the downloaded XML has not ...
1
vote
1answer
155 views

How are AEAD, GCM, CBC, Poly1305, EtM, MtE and E&M related?

I am using OpenSSL 1.1.1 to implement a TLS 1.3 communication module so I tried to learn how data integrity and authentication is ensured. I read a lot about AEAD, GCM, CBC, Poly1305, EtM, MtE and E&...
1
vote
1answer
64 views

Ensure Data Integrity In An ECDH Key Excange

Been playing around with the inner workings of onion routing and I have a problem. If I wanted to send the 2nd node of a relay network an ephemeral ECC public key, it has to go through node 1, so that ...
1
vote
0answers
47 views

SHA256 creates a unique hash for two *.wim that have identical content - are there better methods for verifying *.wim contents? [closed]

I'm trying to verify that the contents of a Windows Image are identical for two WIM files; however, I think the timestamps for the file modifications are affecting the final checksums--even though the ...
3
votes
2answers
194 views

Robust authentication and integrity for short OTP message

Using any of the wonders of modern cryptographic technology, how is it possible to package a tweet-sized plaintext, which is to be encrypted with a proper one-time pad, to ensure its integrity and ...
1
vote
1answer
122 views

Encrypting more than ~64GiB with AES-GCM - Integrity

I'm looking for solution to encrypt more than acceptable limit ~64GiB under same key with AES-GCM. I know I'm obligated to exchange nonces for each next ~64GiB chunk, but there is one thing that is ...
1
vote
2answers
214 views

Does it matter if I publish only publish good or bad MD5 hashes after recovering from a hack?

(This question is a follow-up from another question I asked about MD5, which is why I'm insisting on using MD5 in this question as well) My imaginary Linux distribution, Sushi Linux has had a big ...
2
votes
0answers
27 views

Strategies for fast integrity attestation over multi party computation for large messages

I am looking for ways to efficiently perform integrity attestation over large messages using multi party computation. While, hashing (SHA1, 256...) is one alternative but it's painfully slow and grows ...
2
votes
1answer
83 views

Authenticated encryption and file data integrity

I've got a task to provide the integrity and an authenticated encryption for files in our application. I need an assurance if my way of thinking is correct. I can't use AES GCM, I have to stay with ...
2
votes
0answers
40 views

How to use the wiki UMAC example function?

I want to use the wiki UMAC example to protect the integrity of the communication between 2 devices. Unfortunately I am not quite sure of the meaning of the parameters and I don't want to get it ...
2
votes
0answers
36 views

Is there an instance where integrity protecting metadata is bad?

In JWEs there's a unprotected data field as well as recipients are not integrity protected. Is there a case where integrity protecting this data would be a problem? If it doesn't make a difference, ...
1
vote
1answer
91 views

Provable data possession (PDP) VS Merkle tree

In the paper Provable Data Possession at Untrusted Stores, there is a mechanism that allows a client to efficiently check if the server still has the client's data. They define two constraints for ...
0
votes
2answers
39 views

How a sender will ensure that the public key used for encryption is the key of intended reciver?

Say Alice is the sender and Bob is the receiver. Alice has the public key of Bob and wants to send some data to Bob. How Alice will ensure that the public key she is having is really belongs to Bob?
5
votes
2answers
122 views

What's the functional difference between fountain codes and polynomial secret sharing?

Fountain codes, as I understand it, allow for the reconstruction of a set of data (e.g. a 64-bit word), by sending (without corruption or failure) chunks of data generated using a probabilistic ...
2
votes
1answer
321 views

File integrity checking: why use a hash tree instead of a hash list?

File sharing systems sometimes use the likes of a Tiger Tree Hash to check the integrity of a file as it is downloaded. Hash trees in general are useful to check integrity of the tree leaves without ...
2
votes
2answers
156 views

Can homomorphic encryption offer program integrity and program obfuscation?

By program integrity, I mean the (encrypted) result I receive is indeed the expected result and not, say, an intermediate result or a result affected by an adversary. Can homomorphic encryption defend ...
0
votes
1answer
424 views

How to use cryptography to assure data integrity?

I only understand assurance of integrity using a hash function. How to use cryptograpy to assure data integrity?
0
votes
1answer
161 views

Authentication and integrity

I was trying to solve this problem: Sometimes Alice needs to send a file to Bob, guaranteeing her identity and the file integrity (no confidentiality required); the two parties are sharing a secret w ...
8
votes
1answer
2k views

TLS 1.2 Cipher Suites With AES-GCM – What data (if any) is passed to the AES-GCM cipher as the Additional Authentication Data?

TLS 1.2 defines a number of cipher suites that employ AES-GCM, e.g.: ...
0
votes
1answer
98 views

merkle tree motivation

Here author seems to give overview of merkle trees. However, I have one problem. As in the article author claims you can use merkle trees to verify authenticity of data, e.g. if piece of data is ...
1
vote
1answer
150 views

Hash match vs PGP to ensure integrity

What is the difference? I found it quite hard to check for integrity using Gpg4win. Checking for hash was easy with Online MD5 & SHA1 Hash Generator For File. Is there any advantage to use Gpg4win?...
3
votes
2answers
583 views

Are there better alternatives to CRC32 for distributed download components hash calculation?

Given a server with with download resume capabilities (byte range), we can download a file chunk by chunk. Multiple people will download different parts of the file. If a file ...
0
votes
1answer
2k views

Which algorithm has better performance (HMAC, UMAC, and Poly1305)?

I want to implement a protocol which requires Integrity and Authentication for its messages. I found a lot of algorithms such as HMAC, UMAC, and Poly1305 which provide Integrity and Authentication. So ...
1
vote
0answers
42 views

Is integrity important when building anonymity? [closed]

I was thinking about applying an anonymity process based on ECDSA signatures to anonymize blocks of information, not the public-key itself. Using a deterministic form of ECDSA to sign blocks and ...
0
votes
1answer
136 views

Verifying integrity of large files

I'm looking for the most efficient in memory and time way to verify integrity of large files which have to be encrypted as well. Using SHA256 and other crypto hashes over the whole encrypted file? ...
2
votes
1answer
123 views

Stream cipher with an additional integrity stream?

I want to use a stream cipher to encrypt a continuous bitstream. Additional to that, I want to generate an additional stream to guarantee the integrity of the ciphertext. stream a: ciphertext. ...
3
votes
2answers
731 views

What is the practical use of MDC

Suppose that Alice wants to send a message to Bob and wants to make sure that Bob knows he has received the correct message. She sends the pair $(x,h(x))$ for some hash function (preimage resistant, ...
1
vote
1answer
323 views

Is using ECDSA with AES-GCM viable?

I'm pretty new to the whole cryptography scene, so please forgive me if I make any incorrect statements. I have a 16MB image that I'm encrypting and authenticating using AES-GCM. I obtain a 16MB ...
7
votes
3answers
689 views

How to forge a Shamir secret share?

On this website, we have a lot of questions and answers devoted to Shamir secret sharing. We make it clear that Shamir secret sharing does not guarantee integrity. When we want integrity, we need to ...
3
votes
2answers
1k views

Is message integrity possible without confidentiality? Are there any mainstream protocols?

I understand that many schemes that provide data integrity involve a hash-then-encrypt approach. I was wondering if data integrity is achievable without confidentiality? Are there any mainstream ...
1
vote
1answer
872 views

What does encryption with RSA public key provide?

I want to know if encryption with RSA public key provides confidentiality and integrity. I'm quite sure that it provides confidentiality but I have concerns about integrity. If an attacker would ...
8
votes
2answers
2k views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

This question is aiming at clarification related to message authentication codes (MACs). Wikipedia’s Message Authentication Code article states: In cryptography, a message authentication code (MAC)...
0
votes
1answer
116 views

What are the different uses of MAC and Digital Signature?

I know both of them can be used for Integrity and Authentication. In which practical cases is preferred a MAC? and a Digital Signature? Thank you in advance
0
votes
1answer
271 views

Does Salsa20 protect integrity?

I was reading about the differences between block ciphers and stream ciphers. One thing that hit me was that stream ciphers like RC4 tend to be susceptible to bit-flipping attacks, in which flipping a ...
0
votes
1answer
177 views

persisting sensitive binary data encrypted (+integrity)

[#not_a_crypto_expert] rather than forming the question by the techniques I'll describe the use case: I'm persisting blocks of sensitive binary data in a remote store, the communication is secure (...
1
vote
2answers
2k views

Checking a file for integrity and authentication

A checksum is a small-sized datum derived from a block of digital data for the purpose of detecting errors which may have been introduced during its transmission or storage. It is usually applied to ...
3
votes
1answer
255 views

Does it matter whether the KDF salt is integrity protected?

I am writing a simple application, mainly as a fun challenge, but also to hopefully someday use as my password manager. I'm using pynacl's SecretBox, which ...
0
votes
1answer
256 views

Assure Integrity and authenticity

I want to assure integrity and authenticity in data sent trough a TLS channel. What are the best techniques? For integrity a hash (sha, bcrypt,...) should do the job right? And for authenticity? ...
4
votes
1answer
226 views

Does Shamir Secret Sharing provide integrity?

Shamir secret sharing splits into t number of shares with a t-threshold. However, I can find no information online if this scheme provide integrity (or authentication for that matter, which I assume ...
0
votes
2answers
962 views

Toy Tetragraph hash

Im trying to understand how TTH works, but have a question. Let's take this example: ABCDEFGHIJKLMNOP We have ...
3
votes
3answers
6k views

Security services provided by digital signature

Which of the security services can be provided by digital signature? data integrity nonrepudiation sender authentication receiver authentication I think it can provide nonrepudiation. Because ...