Questions tagged [key-check-value]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
12 votes
1 answer
5k views

Sending KCV (key check value) with cipher text

I was wondering why it is not more common to send the KCV of a secret key together with the cipher text. I see many systems that send cipher text and properly prepend the IV to e.g. a CBC mode ...
Maarten Bodewes's user avatar
  • 91.1k
11 votes
2 answers
3k views

KCV and compatibility with block cipher modes of operation

There has been lately a question on KCV (key check value), value provided by many CRYPTOKI (PKCS#11) implementations. I don't particularly like KCV, but I decided to ask about proper use of KCV. ...
user4982's user avatar
  • 5,299
6 votes
1 answer
171 views

Can an authenticated encryption scheme detect if wrong key is used?

Can an authenticated encryption scheme (like AES-GCM) detect if a wrong key is used for decryption? If not, what is the standard way to check whether the entered key is indeed correct. I presume KCVs ...
Ordinary's user avatar
6 votes
3 answers
32k views

Calculating 3DES Key Check Value (KCV)

I am trying to verify a Triple DES Key Component generated by PC Crypto. The key portion is: E6F1081FEA4C402CC192B65DE367EC3E and the KCV value that should be ...
neif's user avatar
  • 181
9 votes
2 answers
21k views

How to obtain KCV from the key

Simple question: we have AES 128 encryption and a key. How can we calculate the key check value (KCV)? One example: key is 48C3B4286FF421A4A328E68AD9E542A4 and KCV should be 77DC84. I am trying it ...
sventevit's user avatar
  • 244
0 votes
1 answer
1k views

Discrepancy between 3DES in OpenSSL and PyDES [closed]

I'm trying to encrypt some data using triple DES ECB, but I get a discrepancy between OpenSSL and the pyDES library I'm using. When trying to get a KCV value, I'm using a file consisting of 8 bytes ...
Jaciq's user avatar
  • 109
0 votes
1 answer
534 views

Will two KEK's provide the same KCV or should these be different?

If you were to have an MDKac key that you need to send to two parties you would need to encrypt this key with two different KEK/ZCMKs. Will the KCV of the MDKac under KEK1 provide the same KCV as ...
Lauren's user avatar
  • 1