Questions tagged [integrity]

In a cryptographic sense, integrity means unimpaired and complete.

Filter by
Sorted by
Tagged with
1
vote
1answer
451 views

Can ChaCha20 provide integrity?

I have read that in general stream ciphers do not provide data integrity. Can ChaCha20 be implemented in such a way (perhaps like counter mode with message authentication in AES) to provide this?
1
vote
0answers
65 views

getting key $k_{2}$ somehow definitely compromise authentication scheme and attacker can see cipher text now…so not secure

I was going through this question of nested encryption: Given $\Pi$ = $({Gen}, {Enc}, {Dec})$ is authentication encryption we have designed new scheme $\Pi^{'}$ = $({Gen^{'}}, {Enc{'}}, {Dec{'}})$ ...
0
votes
1answer
42 views

Is the tag in a MAC scheme a fixed size?

I've been reading up on MAC schemes. But I cannot seem to find out whether the tag's that are output by running MAC(m) is of a fixed size? I can find a lot of stuff talking about the tag space being a ...
1
vote
0answers
21 views

Is Poly1305 enough for cascading ciphers? [duplicate]

ChaCha20 along with Poly1305 provides confidentiality and integrity. Now suppose I cascade AES on top of ChaCha20. Is it safe to assume that the Poly1305 MAC is still secure, even if I cascade ...
0
votes
0answers
23 views

How Should Multiple Checksums Be Performed On the Same Data?

I am using CRC32 to verify the integrity of received UDP packets. Along with the generator polynomial, the sender will also specify how many checksums to perform on the sent data, as well as what ...
0
votes
0answers
38 views

How can JWE support an integrity check given that it uses a public key to encrypt the message?

As far as I know JWE (JSON Web Encryption) supports both integrity and confidentiality. I agree about the confedintiality because only the recepient with a private key can decrypt a message. What ...
2
votes
2answers
123 views

What security guarantees do blockchains provide for data storage?

When it's considered, like here a project where a user needs to store a (small piece of data) on a blockchain what does that really mean from a cryptographer's perspective? What security guarantees ...
2
votes
1answer
58 views

MAC forgery using the DES's Complementary Property

I've started reading on MACs and working on a problem where given a MAC construction as $H_0=IV$ and for every $i>0$ $H_i=H_{i−1} \oplus E_{M[i]}(H_{i−1})$ and the tag is $(IV,E_{k_1}(H_ℓ))$, I ...
6
votes
1answer
143 views

OpenSSL FIPS integrity check

As far as I know, FIPS requires a set of self tests (POST) to verify the cryptographic algorithms permitted and the integrity of the module. These tests are performed at run-time, so OpenSSL does a ...
1
vote
0answers
29 views

Provable Data Possession

While Provable Data Possession seems to be a very useful and interesting tool for ensuring integrity of data outsourced into Cloud providers, I have never seen a reputed Cloud provider talk about this ...
1
vote
0answers
27 views

Integrity for mixture of encrypted/unencrypted database fields

I have multiple blobs each (symmetrically) encrypted with its own randomly generated key. Now I want to encrypt these blob keys with user keys and store them in a database. A table could have the ...
0
votes
1answer
58 views

Is MAC process different for symmetric and asymmetric?

Message Authentication Code as far as I know works on the shared secret key. Do they work in the same way. Is there no difference between symmetric and asymmetric processes. Can anyone please explain ...
0
votes
2answers
141 views

If I want Integrity and Authentication AND Non-Repudiation, can the Digital Signature be based on the MAC?

Let's say I'm making a digital signature like this: hash = hash(message) digital signature = encrypt_with_private_key(hash) where the private key is Alice's ...
0
votes
1answer
114 views

Boolean XOR function a valid way to verify the integrity of a message

Does the Boolean XOR function represent a valid way to verify the integrity of a message ?
1
vote
0answers
47 views

Using cryptography to protect database integrity

I'm designing a micro-services system where each service manages some set of entities (User, Account, e.g). I want to be able to verify the authenticity of entity identifiers (e.g User-Id and Account-...
0
votes
2answers
804 views

How do AES and DES ensure data integrity?

I have been trying to study for cryptographic symmetric algorithms (AES,DES) and came up with a question whether these two on their own ensure integrity (i.e data has not been altered). Do these two ...
1
vote
2answers
278 views

Can a MAC be used as a HMAC?

I am reading through an information security book right now, and a confusing question poses itself to me: "Could you use a MAC as a HMAC? That is, does a MAC satisfy the same properties that a ...
1
vote
1answer
45 views

Integrity of format preserving Encryption

In this question regarding integrity of FPE, the main point of the answer is that: FFX is not malleable. [...] FFX can provide integrity protection in very limited circumstances. So I was ...
3
votes
1answer
203 views

Information security evaluation

I saw this exercise for evaluating the security(confidentiality, integrity, authenticity, and non-repudiation) of some schemes: ENC(M) || SignA(ENC(M)) ...
1
vote
2answers
176 views

SHA-3 for Integrity

We used to use CRCs to check the integrity of files. For safety analysis we could associate a probability for detecting a corrupted bit in a large file. Now we are using an RSA Signed SHA-3 hash for ...
1
vote
0answers
31 views

Keeping a backup of asymmetric keys with the help of a certificate authority without losing the privacy

First I'll explain the problem, then I will also give a solution(it might be wrong) I've found for it, you let me know what you think about this solution and whether you have a better one. Assume a ...
2
votes
2answers
276 views

Does stronger cryptographic hashes also imply being better at verifying integrity?

What I know so far Fact 1) I know that all cryptographic hash functions have the following properties They are many-to-one in nature They produce fixed size outputs Given an output ...
0
votes
3answers
380 views

AES, is this method to say “The password you entered is wrong” secure?

(TL;DR at the end) Let's say the plaintext hello is encrypted with AES (CFB mode). I noticed that decryption works no matter the given password! Of course if the ...
0
votes
1answer
129 views

Best method for checking integrity of 50 GiB files?

I'm making backups of compressed data (using ZPAQ), some compressed archives are large (50 GiB) I was just going to use sha3sum -a 512, for example: ...
1
vote
1answer
93 views

How reassuring is CRC-then-XTS as authenticated encryption?

It is known that the "xz" compression format embeds a checksum in the compressed file to verify integrity during decompression or standalone testing. The algorithm of the checksum can be one of: CRC32,...
0
votes
0answers
161 views

How to validate the authenticity and integrity of an XML document?

I am working on a C++ desktop application that reads an XML (also created by my org) from a public server (does not require authentication). I would like to make sure that the downloaded XML has not ...
1
vote
1answer
341 views

How are AEAD, GCM, CBC, Poly1305, EtM, MtE and E&M related?

I am using OpenSSL 1.1.1 to implement a TLS 1.3 communication module so I tried to learn how data integrity and authentication is ensured. I read a lot about AEAD, GCM, CBC, Poly1305, EtM, MtE and E&...
1
vote
1answer
92 views

Ensure Data Integrity In An ECDH Key Excange

Been playing around with the inner workings of onion routing and I have a problem. If I wanted to send the 2nd node of a relay network an ephemeral ECC public key, it has to go through node 1, so that ...
1
vote
0answers
62 views

SHA256 creates a unique hash for two *.wim that have identical content - are there better methods for verifying *.wim contents? [closed]

I'm trying to verify that the contents of a Windows Image are identical for two WIM files; however, I think the timestamps for the file modifications are affecting the final checksums--even though the ...
3
votes
2answers
219 views

Robust authentication and integrity for short OTP message

Using any of the wonders of modern cryptographic technology, how is it possible to package a tweet-sized plaintext, which is to be encrypted with a proper one-time pad, to ensure its integrity and ...
1
vote
1answer
194 views

Encrypting more than ~64GiB with AES-GCM - Integrity

I'm looking for solution to encrypt more than acceptable limit ~64GiB under same key with AES-GCM. I know I'm obligated to exchange nonces for each next ~64GiB chunk, but there is one thing that is ...
2
votes
2answers
306 views

Does it matter if I publish only publish good or bad MD5 hashes after recovering from a hack?

(This question is a follow-up from another question I asked about MD5, which is why I'm insisting on using MD5 in this question as well) My imaginary Linux distribution, Sushi Linux has had a big ...
2
votes
0answers
30 views

Strategies for fast integrity attestation over multi party computation for large messages

I am looking for ways to efficiently perform integrity attestation over large messages using multi party computation. While, hashing (SHA1, 256...) is one alternative but it's painfully slow and grows ...
2
votes
1answer
107 views

Authenticated encryption and file data integrity

I've got a task to provide the integrity and an authenticated encryption for files in our application. I need an assurance if my way of thinking is correct. I can't use AES GCM, I have to stay with ...
2
votes
0answers
45 views

How to use the wiki UMAC example function?

I want to use the wiki UMAC example to protect the integrity of the communication between 2 devices. Unfortunately I am not quite sure of the meaning of the parameters and I don't want to get it ...
2
votes
0answers
38 views

Is there an instance where integrity protecting metadata is bad?

In JWEs there's a unprotected data field as well as recipients are not integrity protected. Is there a case where integrity protecting this data would be a problem? If it doesn't make a difference, ...
1
vote
1answer
99 views

Provable data possession (PDP) VS Merkle tree

In the paper Provable Data Possession at Untrusted Stores, there is a mechanism that allows a client to efficiently check if the server still has the client's data. They define two constraints for ...
0
votes
2answers
47 views

How a sender will ensure that the public key used for encryption is the key of intended reciver?

Say Alice is the sender and Bob is the receiver. Alice has the public key of Bob and wants to send some data to Bob. How Alice will ensure that the public key she is having is really belongs to Bob?
5
votes
2answers
153 views

What's the functional difference between fountain codes and polynomial secret sharing?

Fountain codes, as I understand it, allow for the reconstruction of a set of data (e.g. a 64-bit word), by sending (without corruption or failure) chunks of data generated using a probabilistic ...
2
votes
1answer
452 views

File integrity checking: why use a hash tree instead of a hash list?

File sharing systems sometimes use the likes of a Tiger Tree Hash to check the integrity of a file as it is downloaded. Hash trees in general are useful to check integrity of the tree leaves without ...
2
votes
2answers
231 views

Can homomorphic encryption offer program integrity and program obfuscation?

By program integrity, I mean the (encrypted) result I receive is indeed the expected result and not, say, an intermediate result or a result affected by an adversary. Can homomorphic encryption defend ...
0
votes
1answer
469 views

How to use cryptography to assure data integrity?

I only understand assurance of integrity using a hash function. How to use cryptograpy to assure data integrity?
0
votes
1answer
176 views

Authentication and integrity

I was trying to solve this problem: Sometimes Alice needs to send a file to Bob, guaranteeing her identity and the file integrity (no confidentiality required); the two parties are sharing a secret w ...
8
votes
1answer
3k views

TLS 1.2 Cipher Suites With AES-GCM – What data (if any) is passed to the AES-GCM cipher as the Additional Authentication Data?

TLS 1.2 defines a number of cipher suites that employ AES-GCM, e.g.: ...
0
votes
1answer
108 views

merkle tree motivation

Here author seems to give overview of merkle trees. However, I have one problem. As in the article author claims you can use merkle trees to verify authenticity of data, e.g. if piece of data is ...
1
vote
1answer
408 views

Hash match vs PGP to ensure integrity

What is the difference? I found it quite hard to check for integrity using Gpg4win. Checking for hash was easy with Online MD5 & SHA1 Hash Generator For File. Is there any advantage to use Gpg4win?...
3
votes
2answers
779 views

Are there better alternatives to CRC32 for distributed download components hash calculation?

Given a server with with download resume capabilities (byte range), we can download a file chunk by chunk. Multiple people will download different parts of the file. If a file ...
1
vote
1answer
2k views

Which algorithm has better performance (HMAC, UMAC, and Poly1305)?

I want to implement a protocol which requires Integrity and Authentication for its messages. I found a lot of algorithms such as HMAC, UMAC, and Poly1305 which provide Integrity and Authentication. So ...
1
vote
0answers
44 views

Is integrity important when building anonymity? [closed]

I was thinking about applying an anonymity process based on ECDSA signatures to anonymize blocks of information, not the public-key itself. Using a deterministic form of ECDSA to sign blocks and ...
0
votes
1answer
221 views

Verifying integrity of large files

I'm looking for the most efficient in memory and time way to verify integrity of large files which have to be encrypted as well. Using SHA256 and other crypto hashes over the whole encrypted file? ...