Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

A means of recovering cryptographic keys when the usual means for obtaining them is unavailable.; the ability to uncover the secret key to a cryptographic message.

1
vote
2answers
82 views

Public-private algorithm where it is not possible to recover public key from private key?

Is there an asymmetric algorithm where it is not possible to extract a public key from private key? So far any algorithms I tried (dsa, rsa, ecdsa, ed25519) successfully recover their public keys from ...
2
votes
1answer
46 views

Can I implement key recovery without compromising security?

I'm no crypto expert but I'm trying to figure out if this is possible: I'm building an application that has access to very sensitive user data. I receive this data in plain text but I'm not allowed ...
0
votes
1answer
245 views

Recovery public key from secp256k1 signature and message [closed]

Regarding this article about a signature recovery However, with the signature and the message that was signed, and the knowledge of the curve, it is possible to generate two public keys So we can ...
0
votes
1answer
54 views

Is there any symmetric encryption algorithm cannot guess the key when encryption and decryption value are known?

I want symmetric encryption algorithms that cannot have their keys recovered when given plaintext and ciphertext. I tried XOR cipher algorithm, but when I've obtained ciphertext and plaintext, the key ...
3
votes
2answers
480 views

Recovering private key from Secp256k1 signatures

I've seen many answers here and many articles that says we can recover the private key from reused R signatures. But, what if the r,s signatures are different in transaction of bitcoin then is there a ...
0
votes
1answer
65 views

Can high-entropy data be reconstructed from plaintext XORs in CTR nonce reuse?

(My interest is academic; I certainly have no intention of rolling my own crypto, especially the known-broken type!) I know that if the nonce gets reused in a CTR stream, the two cipher blocks can be ...
1
vote
1answer
162 views

Cryptanalys of “bad” RC4 implementation

I need help of cryptanalyzing a "bad" RC4 implementation to recover an encrypted text of 13742 bytes. I don't know the key and this implementation does not utilize the drop-n routine. But, I know ...
2
votes
1answer
157 views

Does this PBKDF2-SHA1 payload hint at a cryptographic security issue?

Blockchain first 16 encrypted bytes, IV, and iter_count – all encoded in Base64: Yms6xqrzCfFsQadVZ5gQonMtnQAAAAAAAAAAAAAAAAAAAAAQJwAA69tYNg== Does it looks like “...
1
vote
1answer
547 views

Recovery of blowfish encryption key?

Is it possible to recover key used for blowfish encryption, if I have encoded and decoded string as well as initialization vector tables (bfp and ks0-3)? I don't know the length of the key.
2
votes
1answer
703 views

ECDSA pubkey recovery issue

I try to recover public key from the given message $m$ and pair $(r, s)$ using curve that satisfies standard RFC7091. I am using algorithm from one of secp256k1 implementation but it seems that not ...
4
votes
3answers
907 views

Is including the key as AAD actually dangerous?

In a recent answer, Maarten mentioned including the key is a bad idea as well. This got my curious. Is there any scientific / cryptographic analysis whether including the key in the ...
0
votes
1answer
47 views

CCA-2 key recovery attack to an homomorphic scheme?

It is known that homomorphic encryption schemes are not secure against CCA attacks. This is because in the security game, the attacker may use homomorphic evaluation to cheat in the the challenges and ...
3
votes
1answer
160 views

Using Pollard's lambda in a key-recovery attack on DH

I've become interested in writing an exploit for the OpenSSL vulnerability here (CVE-2016-0701). Running through the bullets describing the attack, I can follow up to the last bullet point. Reviewing ...
4
votes
2answers
13k views

How to find the keyword of the Playfair cipher, given the plaintext and the ciphertext?

I know how the Playfair cipher works. I would like to know how to find the keyword of the Playfair cipher, given some ciphertext and the corresponding plaintext. For example: encrypted: ...
2
votes
1answer
367 views

How to detect what crypto-method is used by Filecoder.Q?

I have 2 different images, one original, and one locked by a malware detected by eset as "Win32/Filecoder.Q". How to detect the encryption method that is used and the key, that is not using any ...
6
votes
1answer
2k views

How does Microsoft's BitLocker Recovery Code work?

I don't trust Microsoft BitLocker because it is closed source, which makes it so people can't audit it. But now I'm really interested in how its recovery code works. In my own knowledge, encrypted ...
6
votes
2answers
153 views

How should I implement a secure recovery of encryption?

I want to create a system to host as securely as possible encrypted data in a way that not even the system can know the content of the data, but that it could be recovered. I would like to know how ...
40
votes
6answers
3k views

How to check that you got the right key when brute forcing an encryption?

How do you know when you have the right key when brute-forcing? Let's say that they test the right key. They then have to check that the decrypted text makes sense. To do so, they can test whether ...
3
votes
1answer
739 views

Understanding ransomware – What makes plain-text-attacks or brute-forcing so hard?

Say I have four files. Two are completely unencrypted, while the other two are the exact same files other than that they have been encrypted with (apparently) the same public key (via a ransomware ...
4
votes
1answer
980 views

RSA public key recovery from signatures

Is it possible (how) to recover public (512 bit long) RSA key from multiple signatures having corresponding plain texts. Padding is not randomized. I need it to verify any future message comming from ...
2
votes
1answer
395 views

What does “invertibility of the cryptographic primitive” mean?

source: http://www.cosic.esat.kuleuven.be/publications/thesis-152.pdf ,page 32 Note that key recovery implies invertibility of the cryptographic primitive (because due to the Kerckhoffs’ ...
11
votes
3answers
941 views

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

Like people always say: “Attacks only get worse…” — which is why I'm asking early. I have been reading the paper “RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis” published December 18, ...
3
votes
2answers
2k views

Determine the Key given ciphertexts and plaintexts?

Given two sets of plaintexts and their corresponding ciphertexts, how does one determine the key $K$? The ciphertexts are: $$C_1= (P_1 \oplus K_0) + K_1$$ and $$C_2= (P_2 \oplus K_0) + K_1$$ $K = ...
6
votes
2answers
820 views

Cryptanalysis and weaknesses of SEED cipher

I've discovered that a client has SEED enabled in their SSL ciphers, and would like to know a bit more about it from a security perspective. The Wikipedia article doesn't mention any flaws, yet I've ...