Questions tagged [key-check-value]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
0 answers
85 views

What's the probability distribution of 3DES keys' key check values?

Do the key check values of two-key 3DES keys have a uniform distribution? If not I'm curious as to what the distribution is. I ask because I want to know how safe it is to use a key's KCV as an ...
Christopher Simmons's user avatar
6 votes
1 answer
197 views

Can an authenticated encryption scheme detect if wrong key is used?

Can an authenticated encryption scheme (like AES-GCM) detect if a wrong key is used for decryption? If not, what is the standard way to check whether the entered key is indeed correct. I presume KCVs ...
Ordinary's user avatar
1 vote
1 answer
183 views

Is it safe to use the CBC-MAC as a Initial Vector and Key Check Value in deterministic encryption?

I want to deterministically encrypt a short message <50 bytes with AES-128 CBC. I also want to be able to detect if the correct key is being used. Ciphertext and IV integrity will be guaranteed by ...
Vincent007's user avatar
1 vote
0 answers
294 views

KCV scheme that encrypts a hash over key and IV

Is there anything wrong with this key-check value scheme? This question is a follow-up to an earlier question of mine. In summary, I want to devise a key-check value scheme that will enable my ...
kjo's user avatar
  • 329
0 votes
1 answer
2k views

Discrepancy between 3DES in OpenSSL and PyDES [closed]

I'm trying to encrypt some data using triple DES ECB, but I get a discrepancy between OpenSSL and the pyDES library I'm using. When trying to get a KCV value, I'm using a file consisting of 8 bytes ...
Jaciq's user avatar
  • 109
0 votes
1 answer
558 views

Will two KEK's provide the same KCV or should these be different?

If you were to have an MDKac key that you need to send to two parties you would need to encrypt this key with two different KEK/ZCMKs. Will the KCV of the MDKac under KEK1 provide the same KCV as ...
Lauren's user avatar
  • 1
2 votes
1 answer
296 views

Risks of full length KCV (components and full keys)?

We have to comply with third-party security requirements for the loading of 3DES keys. I'm a little confused about the reason behind why Key Check Values (KCVs) can't be full length. As KCV are hashes,...
goldenflipflop's user avatar
6 votes
3 answers
33k views

Calculating 3DES Key Check Value (KCV)

I am trying to verify a Triple DES Key Component generated by PC Crypto. The key portion is: E6F1081FEA4C402CC192B65DE367EC3E and the KCV value that should be ...
neif's user avatar
  • 181
11 votes
2 answers
3k views

KCV and compatibility with block cipher modes of operation

There has been lately a question on KCV (key check value), value provided by many CRYPTOKI (PKCS#11) implementations. I don't particularly like KCV, but I decided to ask about proper use of KCV. ...
user4982's user avatar
  • 5,309
9 votes
2 answers
22k views

How to obtain KCV from the key

Simple question: we have AES 128 encryption and a key. How can we calculate the key check value (KCV)? One example: key is 48C3B4286FF421A4A328E68AD9E542A4 and KCV should be 77DC84. I am trying it ...
sventevit's user avatar
  • 244
5 votes
2 answers
560 views

Checking a key before actually using it

I have a block of data crypted using twofish with a key of 128 bit. The data must be accessed from a GUI, the user gives the key, the block is decoded and the real data is accessed. Problem is that ...
Remo.D's user avatar
  • 245
12 votes
1 answer
5k views

Sending KCV (key check value) with cipher text

I was wondering why it is not more common to send the KCV of a secret key together with the cipher text. I see many systems that send cipher text and properly prepend the IV to e.g. a CBC mode ...
Maarten Bodewes's user avatar