Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [integrity]

In a cryptographic sense, integrity means unimpaired and complete.

1
vote
0answers
27 views

Is there an instance where integrity protecting metadata is bad?

In JWEs there's a unprotected data field as well as recipients are not integrity protected. Is there a case where integrity protecting this data would be a problem? If it doesn't make a difference, ...
1
vote
1answer
48 views

Provable data possession (PDP) VS Merkle tree

In the paper Provable Data Possession at Untrusted Stores, there is a mechanism that allows a client to efficiently check if the server still has the client's data. They define two constraints for ...
0
votes
2answers
31 views

How a sender will ensure that the public key used for encryption is the key of intended reciver?

Say Alice is the sender and Bob is the receiver. Alice has the public key of Bob and wants to send some data to Bob. How Alice will ensure that the public key she is having is really belongs to Bob?
3
votes
2answers
59 views

What's the functional difference between fountain codes and polynomial secret sharing?

Fountain codes, as I understand it, allow for the reconstruction of a set of data (e.g. a 64-bit word), by sending (without corruption or failure) chunks of data generated using a probabilistic ...
1
vote
1answer
104 views

File integrity checking: why use a hash tree instead of a hash list?

File sharing systems sometimes use the likes of a Tiger Tree Hash to check the integrity of a file as it is downloaded. Hash trees in general are useful to check integrity of the tree leaves without ...
1
vote
2answers
80 views

Can homomorphic encryption offer program integrity and program obfuscation?

By program integrity, I mean the (encrypted) result I receive is indeed the expected result and not, say, an intermediate result or a result affected by an adversary. Can homomorphic encryption defend ...
0
votes
1answer
320 views

How to use cryptography to assure data integrity?

I only understand assurance of integrity using a hash function. How to use cryptograpy to assure data integrity?
0
votes
1answer
105 views

Authentication and integrity

I was trying to solve this problem: Sometimes Alice needs to send a file to Bob, guaranteeing her identity and the file integrity (no confidentiality required); the two parties are sharing a secret w ...
7
votes
1answer
642 views

TLS 1.2 Cipher Suites With AES-GCM – What data (if any) is passed to the AES-GCM cipher as the Additional Authentication Data?

TLS 1.2 defines a number of cipher suites that employ AES-GCM, e.g.: ...
0
votes
1answer
65 views

merkle tree motivation

Here author seems to give overview of merkle trees. However, I have one problem. As in the article author claims you can use merkle trees to verify authenticity of data, e.g. if piece of data is ...
1
vote
1answer
43 views

Hash match vs PGP to ensure integrity

What is the difference? I found it quite hard to check for integrity using Gpg4win. Checking for hash was easy with Online MD5 & SHA1 Hash Generator For File. Is there any advantage to use Gpg4win?...
3
votes
2answers
281 views

Are there better alternatives to CRC32 for distributed download components hash calculation?

Given a server with with download resume capabilities (byte range), we can download a file chunk by chunk. Multiple people will download different parts of the file. If a file ...
0
votes
1answer
393 views

Which algorithm has better performance (HMAC, UMAC, and Poly1305)?

I want to implement a protocol which requires Integrity and Authentication for its messages. I found a lot of algorithms such as HMAC, UMAC, and Poly1305 which provide Integrity and Authentication. So ...
1
vote
0answers
30 views

Is integrity important when building anonymity?

I was thinking about applying an anonymity process based on ECDSA signatures to anonymize blocks of information, not the public-key itself. Using a deterministic form of ECDSA to sign blocks and ...
0
votes
1answer
73 views

Verifying integrity of large files

I'm looking for the most efficient in memory and time way to verify integrity of large files which have to be encrypted as well. Using SHA256 and other crypto hashes over the whole encrypted file? ...
1
vote
0answers
60 views

Are authenticated encryption (AE) aproaches such as EtM, E&M and MtE equally secure? [duplicate]

There are different approaches of implementing authenticated encryption (AE) and authenticated encryption with associated data (AEAD) such as: Encrypt-then-MAC (EtM) Encrypt-and-MAC (E&M) MAC-...
2
votes
1answer
77 views

Stream cipher with an additional integrity stream?

I want to use a stream cipher to encrypt a continuous bitstream. Additional to that, I want to generate an additional stream to guarantee the integrity of the ciphertext. stream a: ciphertext. ...
3
votes
2answers
287 views

What is the practical use of MDC

Suppose that Alice wants to send a message to Bob and wants to make sure that Bob knows he has received the correct message. She sends the pair $(x,h(x))$ for some hash function (preimage resistant, ...
1
vote
1answer
139 views

Is using ECDSA with AES-GCM viable?

I'm pretty new to the whole cryptography scene, so please forgive me if I make any incorrect statements. I have a 16MB image that I'm encrypting and authenticating using AES-GCM. I obtain a 16MB ...
7
votes
3answers
440 views

How to forge a Shamir secret share?

On this website, we have a lot of questions and answers devoted to Shamir secret sharing. We make it clear that Shamir secret sharing does not guarantee integrity. When we want integrity, we need to ...
3
votes
2answers
580 views

Is message integrity possible without confidentiality? Are there any mainstream protocols?

I understand that many schemes that provide data integrity involve a hash-then-encrypt approach. I was wondering if data integrity is achievable without confidentiality? Are there any mainstream ...
1
vote
1answer
520 views

What does encryption with RSA public key provide?

I want to know if encryption with RSA public key provides confidentiality and integrity. I'm quite sure that it provides confidentiality but I have concerns about integrity. If an attacker would ...
7
votes
2answers
1k views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

This question is aiming at clarification related to message authentication codes (MACs). Wikipedia’s Message Authentication Code article states: In cryptography, a message authentication code (MAC)...
0
votes
1answer
75 views

What are the different uses of MAC and Digital Signature?

I know both of them can be used for Integrity and Authentication. In which practical cases is preferred a MAC? and a Digital Signature? Thank you in advance
0
votes
0answers
59 views

how to use CBC-MAC to ensure both integrity and authentication?

If I used the CBC mode to encrypt and decrypt (n) blocks how can I use CBC-MAC to ensure both integrity and the authentication, I know how to use it for authentication only but what if I want to use ...
0
votes
1answer
140 views

Does Salsa20 protect integrity?

I was reading about the differences between block ciphers and stream ciphers. One thing that hit me was that stream ciphers like RC4 tend to be susceptible to bit-flipping attacks, in which flipping a ...
0
votes
1answer
77 views

persisting sensitive binary data encrypted (+integrity)

[#not_a_crypto_expert] rather than forming the question by the techniques I'll describe the use case: I'm persisting blocks of sensitive binary data in a remote store, the communication is secure (...
1
vote
2answers
621 views

Checking a file for integrity and authentication

A checksum is a small-sized datum derived from a block of digital data for the purpose of detecting errors which may have been introduced during its transmission or storage. It is usually applied to ...
3
votes
1answer
184 views

Does it matter whether the KDF salt is integrity protected?

I am writing a simple application, mainly as a fun challenge, but also to hopefully someday use as my password manager. I'm using pynacl's SecretBox, which ...
0
votes
1answer
165 views

Assure Integrity and authenticity

I want to assure integrity and authenticity in data sent trough a TLS channel. What are the best techniques? For integrity a hash (sha, bcrypt,...) should do the job right? And for authenticity? ...
4
votes
1answer
172 views

Does Shamir Secret Sharing provide integrity?

Shamir secret sharing splits into t number of shares with a t-threshold. However, I can find no information online if this scheme provide integrity (or authentication for that matter, which I assume ...
1
vote
1answer
447 views

Toy Tetragraph hash

Im trying to understand how TTH works, but have a question. Let's take this example: ABCDEFGHIJKLMNOP We have ...
4
votes
3answers
4k views

Security services provided by digital signature

Which of the security services can be provided by digital signature? data integrity nonrepudiation sender authentication receiver authentication I think it can provide nonrepudiation. Because ...
0
votes
0answers
432 views

MD5 strict input message size

I'm currently interested in the MD5 hash algorithm in way to manipulate it a bit to have the input size = to the output size. To elaborate more, I'm currently working on finding a possibility to ...
1
vote
1answer
54 views

Ensuring integrity in a multi-user secret vault

Assume you have a vault containing secrets. Each one is encrypted for at least one authorized recipient using some public key crypto (one file per secret). Each authorzied recipient can decrypt all of ...
6
votes
1answer
1k views

Difference between INT-CTXT and INT-PTXT

I have read recently (here) about INT-CTXT and INT-PTXT and that INT-CTXT is strictly stronger than INT-PTXT. I wonder if there is any clear example of the situation when INT-PTXT is achieved but no ...
4
votes
1answer
743 views

Blockchain use in record management

From my understanding of blockchain, I feel the main use of blockchain is to do something in a decentralised way as compared to the traditional centralised way which involves a middle man. Usually, ...
4
votes
2answers
359 views

How to provide integrity even though using Authenticated Encryption?

Gilles made the following comment here: using authenticated encryption does not guarantee integrity, only authenticity. You can't detect a rollback. From what I gathered: Authenticated Encryption ...
4
votes
1answer
409 views

Properties provided by GCM

In the introduction of NIST Special Publication 800-38D is said that: GCM provides assurance of the confidentiality of data using a variation of the Counter mode of operation for encryption. GCM ...
7
votes
2answers
804 views

Integrity with anti-confidentiality

The Republic of Brutopia are updating the design of their library cards with a new security feature: a 2D barcode containing a cryptographically signed copy of the human-readable fields on the card. ...
0
votes
3answers
99 views

Can DH shared secret provide integrity?

Assume that A and B have exchanged their public keys beforehand. Now, A and B wants to communicate over an insecure channel and want to provide integrity and confidentiality on the message. A use the ...
2
votes
3answers
676 views

One Time Password generation algorithm to ensure data/transaction integrity?

Here is my use case: A user is trying to transfer money to his friend's account. He enters transaction details on banking website. Bank receives it and then Bank sends transaction details (receiver ...
0
votes
1answer
91 views

Is there a way to inercept encrypted https connections by mimicking a cert authority?

In this video, it is shown how encryption can be theoretically intercepted without the client noticing it. In short something in between the connection could make a handshake with the requested ...
2
votes
1answer
3k views

HMAC with public-private key

I need a way to protect my data. More then encryption I need a way to guarantee integrity and authenticity but I also need to be the only one that can understand integrity and authenticity. I found ...
1
vote
0answers
55 views

Authenticating a range of a ciphertext

I have some data that I CTR-AES-256 encrypt already. I am aware of ways to validate the integrity of the entire file (ie: a separate MAC of the plaintext, or encrypt then MAC, etc). But none of ...
7
votes
2answers
490 views

We can obtain “absolutely perfect CONFIDENTIALITY” using the one-time pad. Is there such a thing as “absolutely perfect INTEGRITY”? [duplicate]

The OTP (one-time pad) gives us perfect secrecy. This is the very best confidentiality available in this universe. (Although it does require large keys, which is beside the point of this question). ...
1
vote
3answers
160 views

Is PGP's way of maintaining email security optimal? [duplicate]

I read a book called "computer networking: A top-down approach". It talked about how PGP creates an email message between Alice and Bob to maintain confidentiality, integrity, and authenticity. Let me ...
2
votes
0answers
388 views

Proving CCA security for scheme constructed from secure PRP

We have a $PRP : \{0,1\}^{3n} \rightarrow \{0,1\}^{3n}$ and encryption scheme constructed from this $PRP$. $E_k(x\|r\|0^n)$, where $r$ is randomly chosen from $\{0,1\}^n$ and $0^n$ is a block of ...
0
votes
0answers
110 views

signature, hashing schemes

I have 20 friends. we create message(s) (1...i) and tar them up with a file messages.hashes(1..i). We sign these tars with our ...
0
votes
0answers
22 views

Confidentiality then Integrity with different keys [duplicate]

Can anyone describe how we can do what is said in the below sentence which is in Mark Stamp crypto slides (PPTX) on slide number 101 : Can do a little better - about 1.5 “encryptions” The whole ...