Questions tagged [key-check-value]
The key-check-value tag has no usage guidance.
13 questions
1
vote
1
answer
83
views
Can two different AES keys have the KCV by chance?
I am trying to check KCVs of a few keys.
I am generating the KCV for the keys using the method mentioned here https://crypto.stackexchange.com/a/11873/115990
Question: Can KCVs of two different AES ...
- 113
2
votes
0
answers
116
views
What's the probability distribution of 3DES keys' key check values?
Do the key check values of two-key 3DES keys have a uniform distribution? If not I'm curious as to what the distribution is.
I ask because I want to know how safe it is to use a key's KCV as an ...
6
votes
1
answer
226
views
Can an authenticated encryption scheme detect if wrong key is used?
Can an authenticated encryption scheme (like AES-GCM) detect if a wrong key is used for decryption? If not, what is the standard way to check whether the entered key is indeed correct. I presume KCVs ...
- 91
1
vote
1
answer
210
views
Is it safe to use the CBC-MAC as a Initial Vector and Key Check Value in deterministic encryption?
I want to deterministically encrypt a short message <50 bytes with AES-128 CBC. I also want to be able to detect if the correct key is being used.
Ciphertext and IV integrity will be guaranteed by ...
- 55
1
vote
0
answers
332
views
KCV scheme that encrypts a hash over key and IV
Is there anything wrong with this key-check value scheme?
This question is a follow-up to an earlier question of mine. In summary, I want to devise a key-check value scheme that will enable my ...
- 329
0
votes
1
answer
2k
views
Discrepancy between 3DES in OpenSSL and PyDES [closed]
I'm trying to encrypt some data using triple DES ECB, but I get a discrepancy between OpenSSL and the pyDES library I'm using.
When trying to get a KCV value, I'm using a file consisting of 8 bytes ...
- 109
0
votes
1
answer
640
views
Will two KEK's provide the same KCV or should these be different?
If you were to have an MDKac key that you need to send to two parties you would need to encrypt this key with two different KEK/ZCMKs.
Will the KCV of the MDKac under KEK1 provide the same KCV as ...
- 1
2
votes
1
answer
305
views
Risks of full length KCV (components and full keys)?
We have to comply with third-party security requirements for the loading of 3DES keys. I'm a little confused about the reason behind why Key Check Values (KCVs) can't be full length. As KCV are hashes,...
6
votes
3
answers
35k
views
Calculating 3DES Key Check Value (KCV)
I am trying to verify a Triple DES Key Component generated by PC Crypto.
The key portion is:
E6F1081FEA4C402CC192B65DE367EC3E
and the KCV value that should be ...
- 181
11
votes
2
answers
3k
views
KCV and compatibility with block cipher modes of operation
There has been lately a question on KCV (key check value), value provided by many CRYPTOKI (PKCS#11) implementations. I don't particularly like KCV, but I decided to ask about proper use of KCV.
...
- 5,369
9
votes
2
answers
24k
views
How to obtain KCV from the key
Simple question: we have AES 128 encryption and a key. How can we calculate the key check value (KCV)?
One example: key is 48C3B4286FF421A4A328E68AD9E542A4 and KCV should be 77DC84.
I am trying it ...
- 244
5
votes
2
answers
573
views
Checking a key before actually using it
I have a block of data crypted using twofish with a key of 128 bit.
The data must be accessed from a GUI, the user gives the key, the block is decoded and the real data is accessed.
Problem is that ...
- 245
12
votes
1
answer
5k
views
Sending KCV (key check value) with cipher text
I was wondering why it is not more common to send the KCV of a secret key together with the cipher text. I see many systems that send cipher text and properly prepend the IV to e.g. a CBC mode ...
- 94.5k