Questions tagged [integrity]

In a cryptographic sense, integrity means unimpaired and complete.

Filter by
Sorted by
Tagged with
1
vote
1answer
30 views

Ensure Data Integrity In An ECDH Key Excange

Been playing around with the inner workings of onion routing and I have a problem. If I wanted to send the 2nd node of a relay network an ephemeral ECC public key, it has to go through node 1, so that ...
1
vote
0answers
38 views

SHA256 creates a unique hash for two *.wim that have identical content - are there better methods for verifying *.wim contents? [closed]

I'm trying to verify that the contents of a Windows Image are identical for two WIM files; however, I think the timestamps for the file modifications are affecting the final checksums--even though the ...
3
votes
2answers
170 views

Robust authentication and integrity for short OTP message

Using any of the wonders of modern cryptographic technology, how is it possible to package a tweet-sized plaintext, which is to be encrypted with a proper one-time pad, to ensure its integrity and ...
1
vote
1answer
96 views

Encrypting more than ~64GiB with AES-GCM - Integrity

I'm looking for solution to encrypt more than acceptable limit ~64GiB under same key with AES-GCM. I know I'm obligated to exchange nonces for each next ~64GiB chunk, but there is one thing that is ...
1
vote
2answers
163 views

Does it matter if I publish only publish good or bad MD5 hashes after recovering from a hack?

(This question is a follow-up from another question I asked about MD5, which is why I'm insisting on using MD5 in this question as well) My imaginary Linux distribution, Sushi Linux has had a big ...
2
votes
0answers
22 views

Strategies for fast integrity attestation over multi party computation for large messages

I am looking for ways to efficiently perform integrity attestation over large messages using multi party computation. While, hashing (SHA1, 256...) is one alternative but it's painfully slow and grows ...
2
votes
1answer
76 views

Authenticated encryption and file data integrity

I've got a task to provide the integrity and an authenticated encryption for files in our application. I need an assurance if my way of thinking is correct. I can't use AES GCM, I have to stay with ...
2
votes
0answers
37 views

How to use the wiki UMAC example function?

I want to use the wiki UMAC example to protect the integrity of the communication between 2 devices. Unfortunately I am not quite sure of the meaning of the parameters and I don't want to get it ...
2
votes
0answers
34 views

Is there an instance where integrity protecting metadata is bad?

In JWEs there's a unprotected data field as well as recipients are not integrity protected. Is there a case where integrity protecting this data would be a problem? If it doesn't make a difference, ...
1
vote
1answer
84 views

Provable data possession (PDP) VS Merkle tree

In the paper Provable Data Possession at Untrusted Stores, there is a mechanism that allows a client to efficiently check if the server still has the client's data. They define two constraints for ...
0
votes
2answers
39 views

How a sender will ensure that the public key used for encryption is the key of intended reciver?

Say Alice is the sender and Bob is the receiver. Alice has the public key of Bob and wants to send some data to Bob. How Alice will ensure that the public key she is having is really belongs to Bob?
5
votes
2answers
93 views

What's the functional difference between fountain codes and polynomial secret sharing?

Fountain codes, as I understand it, allow for the reconstruction of a set of data (e.g. a 64-bit word), by sending (without corruption or failure) chunks of data generated using a probabilistic ...
2
votes
1answer
229 views

File integrity checking: why use a hash tree instead of a hash list?

File sharing systems sometimes use the likes of a Tiger Tree Hash to check the integrity of a file as it is downloaded. Hash trees in general are useful to check integrity of the tree leaves without ...
2
votes
2answers
113 views

Can homomorphic encryption offer program integrity and program obfuscation?

By program integrity, I mean the (encrypted) result I receive is indeed the expected result and not, say, an intermediate result or a result affected by an adversary. Can homomorphic encryption defend ...
0
votes
1answer
389 views

How to use cryptography to assure data integrity?

I only understand assurance of integrity using a hash function. How to use cryptograpy to assure data integrity?
0
votes
1answer
151 views

Authentication and integrity

I was trying to solve this problem: Sometimes Alice needs to send a file to Bob, guaranteeing her identity and the file integrity (no confidentiality required); the two parties are sharing a secret w ...
7
votes
1answer
2k views

TLS 1.2 Cipher Suites With AES-GCM – What data (if any) is passed to the AES-GCM cipher as the Additional Authentication Data?

TLS 1.2 defines a number of cipher suites that employ AES-GCM, e.g.: ...
0
votes
1answer
92 views

merkle tree motivation

Here author seems to give overview of merkle trees. However, I have one problem. As in the article author claims you can use merkle trees to verify authenticity of data, e.g. if piece of data is ...
1
vote
1answer
80 views

Hash match vs PGP to ensure integrity

What is the difference? I found it quite hard to check for integrity using Gpg4win. Checking for hash was easy with Online MD5 & SHA1 Hash Generator For File. Is there any advantage to use Gpg4win?...
3
votes
2answers
461 views

Are there better alternatives to CRC32 for distributed download components hash calculation?

Given a server with with download resume capabilities (byte range), we can download a file chunk by chunk. Multiple people will download different parts of the file. If a file ...
0
votes
1answer
1k views

Which algorithm has better performance (HMAC, UMAC, and Poly1305)?

I want to implement a protocol which requires Integrity and Authentication for its messages. I found a lot of algorithms such as HMAC, UMAC, and Poly1305 which provide Integrity and Authentication. So ...
1
vote
0answers
42 views

Is integrity important when building anonymity? [closed]

I was thinking about applying an anonymity process based on ECDSA signatures to anonymize blocks of information, not the public-key itself. Using a deterministic form of ECDSA to sign blocks and ...
0
votes
1answer
92 views

Verifying integrity of large files

I'm looking for the most efficient in memory and time way to verify integrity of large files which have to be encrypted as well. Using SHA256 and other crypto hashes over the whole encrypted file? ...
2
votes
1answer
93 views

Stream cipher with an additional integrity stream?

I want to use a stream cipher to encrypt a continuous bitstream. Additional to that, I want to generate an additional stream to guarantee the integrity of the ciphertext. stream a: ciphertext. ...
3
votes
2answers
570 views

What is the practical use of MDC

Suppose that Alice wants to send a message to Bob and wants to make sure that Bob knows he has received the correct message. She sends the pair $(x,h(x))$ for some hash function (preimage resistant, ...
1
vote
1answer
236 views

Is using ECDSA with AES-GCM viable?

I'm pretty new to the whole cryptography scene, so please forgive me if I make any incorrect statements. I have a 16MB image that I'm encrypting and authenticating using AES-GCM. I obtain a 16MB ...
7
votes
3answers
575 views

How to forge a Shamir secret share?

On this website, we have a lot of questions and answers devoted to Shamir secret sharing. We make it clear that Shamir secret sharing does not guarantee integrity. When we want integrity, we need to ...
3
votes
2answers
1k views

Is message integrity possible without confidentiality? Are there any mainstream protocols?

I understand that many schemes that provide data integrity involve a hash-then-encrypt approach. I was wondering if data integrity is achievable without confidentiality? Are there any mainstream ...
1
vote
1answer
673 views

What does encryption with RSA public key provide?

I want to know if encryption with RSA public key provides confidentiality and integrity. I'm quite sure that it provides confidentiality but I have concerns about integrity. If an attacker would ...
8
votes
2answers
1k views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

This question is aiming at clarification related to message authentication codes (MACs). Wikipedia’s Message Authentication Code article states: In cryptography, a message authentication code (MAC)...
0
votes
1answer
105 views

What are the different uses of MAC and Digital Signature?

I know both of them can be used for Integrity and Authentication. In which practical cases is preferred a MAC? and a Digital Signature? Thank you in advance
0
votes
1answer
234 views

Does Salsa20 protect integrity?

I was reading about the differences between block ciphers and stream ciphers. One thing that hit me was that stream ciphers like RC4 tend to be susceptible to bit-flipping attacks, in which flipping a ...
0
votes
1answer
129 views

persisting sensitive binary data encrypted (+integrity)

[#not_a_crypto_expert] rather than forming the question by the techniques I'll describe the use case: I'm persisting blocks of sensitive binary data in a remote store, the communication is secure (...
1
vote
2answers
1k views

Checking a file for integrity and authentication

A checksum is a small-sized datum derived from a block of digital data for the purpose of detecting errors which may have been introduced during its transmission or storage. It is usually applied to ...
3
votes
1answer
235 views

Does it matter whether the KDF salt is integrity protected?

I am writing a simple application, mainly as a fun challenge, but also to hopefully someday use as my password manager. I'm using pynacl's SecretBox, which ...
0
votes
1answer
226 views

Assure Integrity and authenticity

I want to assure integrity and authenticity in data sent trough a TLS channel. What are the best techniques? For integrity a hash (sha, bcrypt,...) should do the job right? And for authenticity? ...
4
votes
1answer
210 views

Does Shamir Secret Sharing provide integrity?

Shamir secret sharing splits into t number of shares with a t-threshold. However, I can find no information online if this scheme provide integrity (or authentication for that matter, which I assume ...
0
votes
2answers
771 views

Toy Tetragraph hash

Im trying to understand how TTH works, but have a question. Let's take this example: ABCDEFGHIJKLMNOP We have ...
3
votes
3answers
5k views

Security services provided by digital signature

Which of the security services can be provided by digital signature? data integrity nonrepudiation sender authentication receiver authentication I think it can provide nonrepudiation. Because ...
1
vote
1answer
55 views

Ensuring integrity in a multi-user secret vault

Assume you have a vault containing secrets. Each one is encrypted for at least one authorized recipient using some public key crypto (one file per secret). Each authorzied recipient can decrypt all of ...
5
votes
1answer
1k views

Difference between INT-CTXT and INT-PTXT

I have read recently (here) about INT-CTXT and INT-PTXT and that INT-CTXT is strictly stronger than INT-PTXT. I wonder if there is any clear example of the situation when INT-PTXT is achieved but no ...
3
votes
1answer
793 views

Blockchain use in record management

From my understanding of blockchain, I feel the main use of blockchain is to do something in a decentralised way as compared to the traditional centralised way which involves a middle man. Usually, ...
3
votes
2answers
481 views

How to provide integrity even though using Authenticated Encryption?

Gilles made the following comment here: using authenticated encryption does not guarantee integrity, only authenticity. You can't detect a rollback. From what I gathered: Authenticated Encryption ...
4
votes
1answer
565 views

Properties provided by GCM

In the introduction of NIST Special Publication 800-38D is said that: GCM provides assurance of the confidentiality of data using a variation of the Counter mode of operation for encryption. GCM ...
7
votes
2answers
818 views

Integrity with anti-confidentiality

The Republic of Brutopia are updating the design of their library cards with a new security feature: a 2D barcode containing a cryptographically signed copy of the human-readable fields on the card. ...
0
votes
3answers
115 views

Can DH shared secret provide integrity?

Assume that A and B have exchanged their public keys beforehand. Now, A and B wants to communicate over an insecure channel and want to provide integrity and confidentiality on the message. A use the ...
2
votes
3answers
865 views

One Time Password generation algorithm to ensure data/transaction integrity?

Here is my use case: A user is trying to transfer money to his friend's account. He enters transaction details on banking website. Bank receives it and then Bank sends transaction details (receiver ...
0
votes
1answer
98 views

Is there a way to inercept encrypted https connections by mimicking a cert authority?

In this video, it is shown how encryption can be theoretically intercepted without the client noticing it. In short something in between the connection could make a handshake with the requested ...
3
votes
4answers
5k views

HMAC with public-private key

I need a way to protect my data. More then encryption I need a way to guarantee integrity and authenticity but I also need to be the only one that can understand integrity and authenticity. I found ...
1
vote
0answers
59 views

Authenticating a range of a ciphertext

I have some data that I CTR-AES-256 encrypt already. I am aware of ways to validate the integrity of the entire file (ie: a separate MAC of the plaintext, or encrypt then MAC, etc). But none of ...