Questions tagged [key-size]

Key size is the size measured in bits of the key used in a cryptographic algorithm.

Filter by
Sorted by
Tagged with
14
votes
2answers
8k views

What size should the HMAC key be with SHA-256?

I'm trying to generate a secret key to be used for HMAC SHA-256 signature processing. I've seen many sample of keys with variable length from 32 characters to 96 characters. What is the ironclad rule ...
2
votes
1answer
30 views

Recommended key size for DKIM

What is the recommended key length for DKIM? I'm currently thinking about a 1024-bit key vs. a 2048-bit one. From the crypto point of view for RSA, 2048 or 4096 bits is clearly recommended--no ...
14
votes
3answers
1k views

Password entropy much lower than entropy of encryption keys. Why is this acceptable?

When talking symmetric encryption, a 56 bit key is known to be so weak. If you use it for your encryption, you are considered a goner. When talking passwords however, the standard these days is ...
0
votes
0answers
32 views

How to encrypt a small number of identities (which are related to each other)? / Which algorithm has the smallest bit-length?

I'm looking for an encryption with as small numbers as possible. Given a small group of identities ($G$) (e.g. numbers from $1$ to $N$). Given one entry (or a small number) $e_i$ allows to compute ...
9
votes
4answers
2k views

80-bit collision resistance because of 80-bit x87 registers?

This is just a curious question, and it probably doesn't belong here anyway, and I'm just being bold asking it here. 80-bit used to be considered an adequate level of security, Skipjack and SHA1 ...
1
vote
1answer
47 views

Security of ciphersuite and key

Is anyone able to cite resources that can be based on choosing a cipher suite? In my case, for a VPN server (OpenVPN) I chose a set of ciphers: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 It provides 128 ...
3
votes
1answer
137 views

Why is the NIST recommendation for the private key exponent so much smaller than the modulus?

NIST recommends a 256-bit private key exponent for DLP with a 3072-bit modulus. This question answered how the modulus was chosen/calculated, however, why isn't the private key size closer to the ...
2
votes
2answers
989 views

How do I calculate a password space if the password only has eight alphabetic characters (not case sensitive)

I read this wiki article and saw this formula for random password's information entropy. Also the wiki article mention that the symbol count for non case sensitive is 36. Is there a way I can ...
1
vote
1answer
143 views

Is it safe to use fast/small hash for key identity?

I have to roll database access keys often, but it's important to know which key each system is using in order to avoid unavailability. I want the systems to report that without exposing the key itself,...
4
votes
1answer
350 views

Post-quantum candidates for asymmetric cryptography with small key sizes

One of the things that I have come to like about elliptic curve cryptography is that the key only needs to be twice as long as the desired security level. That's a very small expansion (I also like it ...
6
votes
1answer
108 views

When does the SIS (Short Integer Solution) Lattice-problem start becoming easy (According to the parameters size)?

SIS (Short Integer Solution) Problem : Given $m$ uniformly random vectors $a \in Z_q^n$, grouped as the columns of a matrix $A \in Z_q^{n.m}$, find a nonzero integer vector $z \in Z^m$ with $||z|| \...
103
votes
7answers
61k views

How big an RSA key is considered secure today?

I think 1024 bit RSA keys were considered secure ~5 years ago, but I assume that's not true anymore. Can 2048 or 4096 keys still be relied upon, or have we gained too much computing power in the ...
0
votes
0answers
30 views

How many possible keys are in a columnar transposition cipher?

In a book I am reading it says that the message "Common sense is not so common." (which has 30 characters, space and punctuation included) has a range of possible keys of 2 to 15, half the message ...
1
vote
1answer
81 views

How is the recommended NIST modulus for DLP chosen/calculated?

NIST recommends a 256-bit private key exponent for DLP with a 3072-bit modulus. From this answer it appears that the range of private key numbers is derived by calculating a prime modulus via $2⋅p$ ...
0
votes
4answers
280 views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

We have ciphers that handle small amounts of entropy, such as a 256 bit key for AES; and we have one time pads for enciphering 1:1 entropy, such as a 1GB key for a 1GB file if you could ever harvest ...
0
votes
0answers
48 views

Can I use XOR to establish a longer shared secret?

SIKEp434 can only be used to encapsulate a 16 byte (128 bit) shared secret key. Most encryption algorithms these days (specifically (X)ChaCha20) require a 256 bit key to be secure, especially in a ...
28
votes
3answers
9k views

Is 80 bits of key size considered safe against brute force attacks?

I came across the KATAN family of ciphers for small domain input blocks. They cipher arbitrary block lengths: 32, 48 and 64, but their key size is 80 bits only. Is 80 bits of key size considered ...
15
votes
4answers
7k views

Why does the recommended key size between symmetric and asymmetric encryption differ greatly?

In various articles it is mentioned that for secure communications, the recommended key sizes are 128-bit key size for symmetric encryption (which makes it $2^{128}$ possible keys?) and 2048-bit key ...
6
votes
1answer
994 views

Extending key sizes in Salsa20 and ChaCha?

I've written implementations of Salsa20 and ChaCha that accept 384 and 448 bit keys. It was fairly trivial to implement, the 'sigma' constant is replaced with key material, and the counter, (which was ...
0
votes
1answer
154 views

Does encrypting with MGF1/SHA-512/1024-bit seed equal to a 1024-bit key block cipher?

Suppose: Alice uses SHA-512 with MGF1(as in PKCS#1 V2) and a 1024-bit random seed to generate a mask, XORs the mask with a message(M), gets a cipher text (CT), and sends the CT to her old friend Bob....
3
votes
1answer
271 views

Key size vs output size of a MAC

What is more important, in terms of security, the size of the MAC or the size of the key that it uses? I'm asking this because I have to answer the following homework question: What is more secure? ...
2
votes
1answer
105 views

Guessing the key in AES256-GCM? [duplicate]

I assume that my case is weird but I've the following information: IV: 0x263e or 0x3e26 Auth tag: 0x25 AES256-GCM encrypted payload: 0x4eec96df534ade4c013a AES256-GCM decrypted payload: ...
1
vote
0answers
50 views

Maximum security strength in bits of ISAAC cipher?

Wikipedia claims key length can be very big in this cipher, so I assume it can offer a million bits of security provided entropy of key is the same? Of course I can SHA-256 hash the key to allow any ...
0
votes
0answers
23 views

Minimal secure index of quasi-cyclic codes for code-based cryptography

It is well-known that keys (generator matrices) of code-based cryptography are very large for its practical usage. To reduce them scientists propose to use families of quasi-cyclic codes. I remind ...
2
votes
2answers
197 views

Can you compress an elliptic curve private key in half?

According to this, a $n$-bit key offers about $n/2$ bits of security. That got me wondering, can you compress the key in half? At first blush, no, because the key is essentially a random number, and ...
1
vote
1answer
257 views

Getting a key size of DSA/Elgamal certificate

I've tried to get a public key size of DSA/Elgamal PGP certificate. Using the Cleopatra I find out that there is actually two public keys - one with DSA with key ...
2
votes
0answers
37 views

Security strength of JPBC Type A curve compared to SecP curve

I recently encountered some problems when learning about the JPBC library. Does the curve generated by (J)PBC using the method typeAcurvegenerator(160,512) and the ...
2
votes
1answer
108 views

Is it possible to successfully encrypt/decrypt in DUKPT using different sized BDKs?

We are having our P2PE Solution validated against the PCI P2PE standard. We currently use a TDEA 2-key based BDK, and IPEK in both the encryption and decryption environments. ANSI X9.24-1 (2009) ...
11
votes
1answer
6k views

What is the maximum size of the plaintext message for RSA OAEP?

OAEP is an important technique used to strengthen RSA. However, using OAEP (or any technique that adds randomness) reduces the size of plaintexts that can be encrypted. Assume for instance that OAEP ...
2
votes
4answers
675 views

Why can't we give block ciphers larger keys?

I have limited math's knowledge so sorry if this question sounds stupid. I saw many people complaining about AES, Twofish and Serpent that these ciphers all could be crackable in the near future and ...
1
vote
1answer
60 views

How secure is a 4 digit seed?

When I Use a 4 digit random number(e.g. 4468) as seed for a (manual) Stream cipher and straddle it to the length of the plaintext using a lagged fibonnacci generator, can this seed be found by brute ...
2
votes
1answer
328 views

cryptographic accumulators: accumulator size vs. max. number of set members?

Here's a basic question about cryptographic accumulators, or at least ones based on fixed-size accumulator values (such as RSA ones based on modulo arithmetic), that is strangely not even mentioned in ...
1
vote
1answer
66 views

Key, plaintext block and ciphertext block permutations question

Question: If a cipher’s key size is $k$ bits and its block size is $b$ bits, how many possible keys are there, how many possible plaintext blocks are there, and how many possible ciphertext blocks are ...
3
votes
1answer
172 views

Why is Diffie-Hellman Insecure If Order of the Generator Has Only Small Prime Factors?

In this post from security SE, Tom Leek mentioned that, for Diffie-Hellman to be secure order of the group $g$ should have a prime factor at least $2k$ bits long, where $k$ is the security parameter. ...
-1
votes
1answer
71 views

How many bits should I request from PBKDF2 to create a strong password?

I'm building a tool which generates passwords by hashing a service name with a master key. PBKDF2 was primarily chosen due to availability in the Web Crypto API. What would be a secure value for the ...
1
vote
1answer
786 views

What is the recommended minimum key length for ECDSA signature

I want to identify the proportion of certificates that use unrecommend ECDSA key length for TLS certificates based on some data I collected. By looking at a standard like NIST for example, I find ...
2
votes
3answers
204 views

What is the largest key size that could be carried by a shuffled deck of playing cards?

If you are carrying a standard 52 card pack of cards (no jokers) what is the largest key size, or the amount of data the cards can hold? Without the cards being marked or distinguishable from an ...
2
votes
2answers
70 views

Can one trade off the number of iterations for key length with the PBKDF2?

When using the PBKDF2, is one taking on significant risk if one chooses to lower the number of iterations and choose to have very long keys? Can I XOR my message with a a very long key (plain-text ...
1
vote
2answers
53 views

Maximum number of possible keys for a fixed-length password?

I'm reviewing some information and possibilities regarding key space size following a unique password requirement, as it were. This particular requirement is a fixed-length password of 12 characters, ...
2
votes
2answers
347 views

Why would Diffie-Hellman Group 21 be 521 bits rather than 512?

Diffie-Hellman groups tend to increment in key sizes as you'd expect up until group 21. Any idea why the key size is 521 rather than 512? I haven't been able to find an answer at all.
2
votes
1answer
521 views

X25519 - why openssl shows 253 bits?

When using ECDHE with Curve25519 with openssl: Server Temp Key: X25519, 253 bits I thought when we use X25519, it use 256 bit key. Why openssl shows the server temp key as 253 bits?
10
votes
2answers
2k views

What is the minimum and maximum value of an RSA private exponent?

Is it possible to calculate the minimum and maximum value of the private exponent for an RSA key, for example for a 1024 key size? In other words, what is the range of values in which the private ...
4
votes
2answers
1k views

Mathematical formula for switching the key for OTP?

Instead of generating the random key for the one time pad cipher over and over again, is there a mathematical formula that allows you to switch the key to a new key? The new key must be as random and ...
10
votes
3answers
1k views

1 Billion Bit Encryption?

So, browsing through YouTube, I stumbled on this video interview of John Draper (Captain Crunch), one of the first "hackers". He talks for about 3 minutes (until 27:48) about his home rolled ...
-1
votes
1answer
526 views

Does C# Triple DES Encryption need 128 bit key or 192 bit key [closed]

I have the following code in C# ...
1
vote
1answer
150 views

Cutting down the size of a long blowfish key

I am reverse engineering a software that uses blowfish for encryption. The target uses an implementation of blowfish that allows arbitrary positive key length with a key size larger than 56 bytes. I ...
2
votes
2answers
335 views

Arbitrary key size in RC4

Is it possible using RC4 that for e.g. a 17-bit long plaintext i can get a 17-bit long ciphertext? From my understanding, for this example i need a 17-bit long key to do the XOR operation for ...
2
votes
1answer
511 views

384-bit ChaCha20 / Salsa20

The standard Salsa20 core is a $\{0,1\}^{384} \to \{0,1\}^{512}$ PRF with a 16 byte constant ($\sigma$ for a 32-byte key), an 8 byte nonce, an 8 byte counter, and a 32 byte key. The hash function does ...
4
votes
2answers
198 views

How does the key size in supersingular isogeny schemes relate to their security level?

I'm looking at the De Feo, Jao, and Plût 2014 paper: Towards quantum-resistant cryptosystems from supersingular elliptic curve isogenies. My understanding of section 3.2 Key Exchange, is that Alice'...
0
votes
2answers
137 views

Why aren't 4096-bit RSA PGP key blocks $\lceil\frac{4096}{6}\rceil=683$ base64 characters long?

If a 4096-bit RSA PGP key is considered sufficiently long for most purposes, why are so many key blocks around 3000 base64 characters in length? Why aren't $\lceil\frac{4096}{6}\rceil=683$ base64 ...