Questions tagged [key-size]

Key size is the size measured in bits of the key used in a cryptographic algorithm.

Filter by
Sorted by
Tagged with
1
vote
1answer
584 views

how to calculate the average key search for AES-128bit?

Assume that an attacker has a special purpose application specific integrated circuit (ASIC) which checks $5\times 10^{8}$ keys per second, and she has a budget of $\$1$ million. One ASIC costs $\$...
2
votes
4answers
675 views

Why can't we give block ciphers larger keys?

I have limited math's knowledge so sorry if this question sounds stupid. I saw many people complaining about AES, Twofish and Serpent that these ciphers all could be crackable in the near future and ...
0
votes
2answers
239 views

How to calculate the key size of my cryptographic system

I have a 'for fun' project, which is a pure software based redesign of the Enigma I. I'd like to compute the key length of my design, but I need some help with that. I have a write-up here (see ...
-2
votes
1answer
594 views

How important is length and complexity of personal password for AES-256 encryption?

I want ask you how important is to have complicated personal password for AES-256 crypto? For example if I use these two "types" of passwords: pass123 ...
0
votes
2answers
128 views

Is there a way of increasing the time to brute force a cipher, but by increasing the ciphertext size instead of the key size?

If you have a symmetric-key algorithm that is limited to using a small key size (say 40-bits) is there any way you could increase the resistance to brute force attacks without increasing the key size? ...
3
votes
1answer
271 views

Key size vs output size of a MAC

What is more important, in terms of security, the size of the MAC or the size of the key that it uses? I'm asking this because I have to answer the following homework question: What is more secure? ...
0
votes
1answer
575 views

What are some of the best prime factorization algorithms and their effecitvity

I was wondering aren't the most used prime factorization algorithms a symbolic mile behind the security of the RSA cryptosystem? The way it looks to me is that every time an algorithm is able to ...
2
votes
1answer
769 views

For RSA, is there a specified size range for $p$ and $q$ when calculating $N$?

Is there a specified size range for $p$ and $q$ when calculating $N$? For example, what size would $p$ and $q$ be when $N$ is 1024 bits?
3
votes
2answers
828 views

Brute-forcing Symmetric Keys

Random keys are often produced using high-quality random generators. Assuming a key produced for a symmetrical cipher, this means that the number of zeros and ones in the key will, on average, ...
2
votes
1answer
80 views

How important is the size of the public key (for a given security level)?

I've read about different signature schemes which for the same bits of security differ largely in the size of the public key: The ones proven in the standard oracle model perform worse than the ones ...
2
votes
1answer
517 views

Paillier's Cryptosystem - Secure Key Size

Given Paillier's Cryptosystem. What size in bits would be considered secure for now and the near future? I know it differs for every cryptosystem. For reference, the most important part of my ...
1
vote
0answers
167 views

Can you travel out of the U.S. with Oracle's JCE Unlimited Strength installed on your laptop? [closed]

Just curious if this "export" restriction applies to general travel outside the U.S. with Oracle's JCE Unlimited Strength installed on a laptop. pertinent text from Oracle's "Java SE BCL License ...
1
vote
1answer
219 views

Bruteforcing a 64-bit key

Diffuse the 64 bit key into eight 8 bit blocks. Each block can be brute forced in 2^8 steps. Thus, eight 2^8 steps and in total 2^11 steps are required for brute forcing. Is this kind of brute force ...
6
votes
2answers
16k views

What is the maximum key size for a 128 bit AES?

What is the maximum key size for AES 128, Will using a key greater than maximum gives extra security or error? Is there a minimum key size? Suppose a key is 128 bit, does it means The key is of ...
0
votes
1answer
98 views

Which public key cryptosystem has the highest security/keysize rate?

I'm working on a 16-bit processor msp430 and I need to know what I need to study when it comes to key size efficiency of a public key cryptosystem.
10
votes
5answers
2k views

What is the purely mathematical definition of encryption strength?

An encryption function can be used to obfuscate pieces of information and later on retrieve them. What is the yardstick for measuring how well the function encrypts the information ? Given any ...
0
votes
1answer
821 views

Hashing entropy to generate 256bit key?

I have a 256bit fully random entropy source from dices, which is probably not cryptographically secure. I have read that it's customary to take the hash of the entropy source in order to generate a ...
0
votes
1answer
322 views

How does the time complexity of block cipher change with increase in key length?

I am interested especially in the case when the keylength exceeds the length of the plaintext. Intuitively, it should be harder to crack the key with an increase in key length even if it exceeds the ...
1
vote
1answer
156 views

Explain: An NTRU key for a lattice of dimension $d$ has size only $O(d\log{d})$

The associated NTRU lattice is of dimension $d=2N$. The public and private key sizes are both of length $O(N)=O(d/2)=O(d)$. So where does the $d\log(d)$ appear? Thanks in advance.
11
votes
1answer
6k views

What is the maximum size of the plaintext message for RSA OAEP?

OAEP is an important technique used to strengthen RSA. However, using OAEP (or any technique that adds randomness) reduces the size of plaintexts that can be encrypted. Assume for instance that OAEP ...
13
votes
1answer
6k views

Is there any benefit from using SHA-512 over SHA-256 when AES just truncates it anyway?

I am still not very clear on how AES-256-CBC can use SHA-512 bit keys, but I assume that it just truncates the 512bit hash down to 256bit. In software like GnuPG and OpenPGP, is there any real benefit ...
-5
votes
1answer
129 views

AES cryptography keys

What are the three possible values (in bits) for the length of the AES algorithm keys? Approximately how big is the AES key space?
2
votes
2answers
110 views

Discrete logarithm key sizes for very short term usage

We have this special use case that our session typically only last for less than 30 minutes, no more than 1 hour at most, after the session finished, the information protected does not matter. Each ...
1
vote
1answer
173 views

What are the typical input lengths for KDFs?

I am looking for typical input lengths for key derivation functions like the HKDF. I know the parameters of HKDF, but can not find any information about typical input sizes to HKDF or any of the other ...
0
votes
1answer
3k views

How to calculate key size for Diffie-Hellman key exchange?

How to calculate key size for Diffie-Hellman key exchange? The strength obviously depends on both generator and prime modulus. Formula: $$g^x\bmod p$$ Public values: $$g=3$$ $$p=...
3
votes
1answer
245 views

Special case of 3DES

3DES uses EDE as it is backward compatible to single DES, but consider the following case $K_1$=$K_2$=$K_3$ which one is more secure EDE or EEE.
2
votes
4answers
6k views

Finding length of a key for a given vigenere cipher using Index of Coincidence

I'm developing an algorithm that takes in a vigenere cipher and produces the key length automatically. However, I'm having trouble understanding how to detect the key length when there are multiple ...
2
votes
2answers
197 views

Can you compress an elliptic curve private key in half?

According to this, a $n$-bit key offers about $n/2$ bits of security. That got me wondering, can you compress the key in half? At first blush, no, because the key is essentially a random number, and ...
1
vote
1answer
160 views

Does passphrase length impact read-write speed?

I'm using Diskcryptor to encrypt a 2TB external USB HD and the process is taking over 2 days. I chose a 100-character strong encryption key passphrase (because, why not?) and am now wondering if the ...
1
vote
1answer
385 views

M-94 disk cipher keyspace

If the M-94 had only 10 disks, what would be the keyspace of the resulting cipher and what is the useful keypspace of the 10 disk cipher?
3
votes
1answer
2k views

Why is RSA-2048 max input 245 bytes?

I can see that the message (after padding) should not be 256 bytes because it might be bigger than the modulus of RSA. So I think that the message should be 255 bytes, but I saw posts that says the ...
3
votes
4answers
995 views

Staying PCI compliant while upgrading encryption

I am trying to migrate my encryption methods, currently I use RSA 1024 key size and hashing with SHA-1. This configuration is going to be deprecated soon, but 2048 key size will have my system so ...
1
vote
1answer
290 views

Is it safe to use the same key for different variants of the HMAC-SHA algorithm?

I need to apply HMAC-SHA hashes in my application. Depending on the context I'll use either HMAC-SHA512, HMAC-SHA256 or HMAC-SHA1. Is it safe to use the same key for all of these algorithms, or do I ...
14
votes
2answers
7k views

Argon2 output length and parameter storage?

I just started using the libsodium port for .net today and the output length parameter kind of confused me (I'm using the argon2i implementation). With my limited exposure to hashing, whatever hash ...
1
vote
2answers
111 views

Clarification on Size of an Encryption Key

Given a key with a certain key size (e.g., 64bits). Would I be correct to interpret this as 8 characters (since each character would be 8 bits under ASCII encoding)? Because the ASCII scheme is ...
1
vote
1answer
257 views

Getting a key size of DSA/Elgamal certificate

I've tried to get a public key size of DSA/Elgamal PGP certificate. Using the Cleopatra I find out that there is actually two public keys - one with DSA with key ...
4
votes
0answers
76 views

Computing cost for a trillionaire to compute GNFS in RFC 3766

RFC 3766, Section 4.1 discusses picking $n$ to achieve some target cost for employing the GNFS, i.e., $T$ is known and $N$ is unknown in the below equation: $$T = \kappa \cdot \exp{\left(c \cdot (\ln{...
2
votes
1answer
48 views

Older key as PGP subkey?

Currently I have a 2048-bit PGP key. Suppose I create a new 4096-bit key. Can I add that old key as a subkey of this new one?
1
vote
1answer
253 views

How can I determine key length for message encrypted by many-time-pad?

For message $ m $ and key $ k $ I get encrypted message $ c $ ($ m \oplus k = c $) where $ length(k) < length(m) $. Additionally I know that message $ m $ is English text. Instead of using pure ...
4
votes
2answers
198 views

How does the key size in supersingular isogeny schemes relate to their security level?

I'm looking at the De Feo, Jao, and Plût 2014 paper: Towards quantum-resistant cryptosystems from supersingular elliptic curve isogenies. My understanding of section 3.2 Key Exchange, is that Alice'...
14
votes
3answers
1k views

Password entropy much lower than entropy of encryption keys. Why is this acceptable?

When talking symmetric encryption, a 56 bit key is known to be so weak. If you use it for your encryption, you are considered a goner. When talking passwords however, the standard these days is ...
11
votes
3answers
9k views

How secure is AES-256, but with an effective key length of 56-bits?

I need to encrypt a few drives using Kaspersky Total Security. I however noted something peculiar, Kaspersky's description of their cipher is: Data will be protected using AES-256 encryption with ...
2
votes
1answer
128 views

Master keys' strengh

If I am going to use a master key to generate a session key, why the master key must be "stronger" than the session key? Like should not be distributing 128-bit AES keys derived from a 56-bit DES key....
6
votes
2answers
6k views

How long should a HMAC cryptographic key be?

In the top answer to this question the answerer says 'with a sufficently long key'. I am using a SHA1-HMAC (may switch to SHA256-HMAC) algorithm to verify cookies sent to clients as authentication ...
1
vote
1answer
143 views

Is it safe to use fast/small hash for key identity?

I have to roll database access keys often, but it's important to know which key each system is using in order to avoid unavailability. I want the systems to report that without exposing the key itself,...
3
votes
1answer
118 views

Why are the bit lengths of keys and digests equal in Lamport signatures?

In Lamport's one time signature scheme: One way function to convert a pseudo random number private key to a public key takes $\{0,1\}^n$ and returns $\{0,1\}^n$. Cryptographic hash function to ...
1
vote
2answers
1k views

Block cipher block and key sizes

Is there any point in making block size less than key size in block cipher? For example, Russian GOST symmetric cipher uses 256-bit keys to encrypt 64-bit blocks. That means there are many keys which ...
1
vote
1answer
4k views

How many bits of symmetric security does RSA-3072 actually provide? [duplicate]

I know that the sizes are standardized to $1024$, $2048$ etc. but they actually provide different security than $128$, $256$... for example $\texttt{RSA-}2048$ is actually $112$ bits of security and $...
4
votes
2answers
416 views

For RSA keys, is the safety of a given key-length different for signing vs encryption?

I'm wondering if considerations of key-length are different when thinking about signing vs encryption. If for some reason, it was safter to use smaller keys for signing that would be interesting.
1
vote
1answer
548 views

PyCrypto and AES: can i use a longer key than the block size (16byte)?

I see that in many scripts are used keys of 16 characters for a block of 16 byte, but can I use key of 40 (for example)? And then why in some scripts with aes module the block size is set to 32 byte ...