Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

The tag has no usage guidance.

5
votes
2answers
55 views

Can RFC 5649 be used to wrap multiple keys with the same KEK?

I am unable to convince myself that RFC5649 is secure when storing multiple keys with the same KEK. My point is: RFC5649 uses AES-ECB, therefore the usual weakness of this method applies, namely an ...
0
votes
0answers
21 views

Wrap a ASN.1 pkcs#8 private key through pkcs11interop using soft hsm

Is there any way to wrap the Asn.1 PKCS#8 private key(ber encoded) through PKCS11interop in SoftHSM? I need to create objecthandle of the Key to perform wrapkey operation. I have a AES secret key. I ...
0
votes
1answer
66 views

Key wrapping - encrypting many times with AES-GCM

When encrypting many short plaintexts with a single key, lets say about 2^70 total plaintexts at under 64 bytes each: Is there a way to use AES-GCM, as specified by NIST Special Publication 800-38D, ...
2
votes
1answer
84 views

Security strength for encryption and authentication (wrapping) of cryptographic keys

Let $K$ and $M$ be AES secret keys. The purpose is to wrap $K$ using $M$ to allow $K$ to be used at a later time (see, e.g. NIST SP 800-38F, section 3.1). One method to achieve this goal is to use $M$ ...
7
votes
2answers
247 views

Is AES-Keywrap (NIST SP 800-38F) quantum-safe?

Having looked at the paper "Breaking Symmetric Cryptosystems using Quantum Period Finding", I'm unsure as to whether the AES-Keywrap as defined by NIST SP 800-38F is safe against the described attack ...
0
votes
1answer
88 views

Properly securing a private key for remote storage

I am attempting to secure a private key for remote storage on an untrusted device. Here are the parameters and my assumptions, I'd like to confirm I'm correct with them. The keypair that I wish to ...
2
votes
1answer
563 views

What is the difference between “wrapping” a key and encrypting?

I wanted to implement a way to generate an RSA public/private key pair and protect the private key with a password. Looking into the Web crypto api, I thought the ...
1
vote
1answer
232 views

What are the inputs of the AES key wrap algorithm?

I have trouble understanding inputs for AES key wrap algorithm as it is explained in section 2.2.1 of RFC3394. Context: I have a data encryption key (DEK) for AES-128 with CTR, which is used to ...
1
vote
1answer
118 views

Can key-wrapping help to securely change passphrase used to generate encryption key?

I am working on financial application where users' data are encrypted with symmetric cipher (AES-256), encryption keys is derived with KDF from user's password. I am looking for way how to give to my ...
2
votes
1answer
112 views

Double-CBC as AES-KW Substitute?

Background. I'm trying to make a local command-line based password manager. So far, I've managed to make the output look dizzy on tty, and I plan to encode user credentials in individual 512-byte ...
4
votes
1answer
370 views

Changing the IV of the AES key wrap algorithm

The first 64-bit block to be encrypted is defined by the spec to be A6A6A6A6A6A6A6A6 Is their any merit in changing this to another value eg. ...
4
votes
2answers
712 views

Encrypting 256 bit AES keys with AES ECB?

What are the pros/cons of using AES ECB mode to encrypt encryption keys (data encryption keys or DEKs)? Aware of the significant weaknesses when it come to encrypting low-entropy data that's greater ...
0
votes
0answers
124 views

What are pros and cons of AES/CBC/PKCS5Padding vs AES/GCM/NoPadding for key wrapping? [duplicate]

For JOSE, (JSON Object Signing and Encryption) the only supported AES algorithms for key encryption are: A128KW, A192KW, ...
1
vote
1answer
274 views

AEAD: Is it secure to decrypt the content encryption key before verifying the MAC?

The JSON Web Encryption (JWE) standard defines a number of encryption modes with the same basic form: First, the a unique content encryption key (CEK) is generated and used to encrypt the payload ...
1
vote
2answers
64 views

How to check the integrity of a key received through mail using symmetric encryption?

I would like to provide access to encrypted data through a cloud service provider, using a pay-as-you-go model. This means that we will sometimes need to revoke a user's access to the data. To ...
2
votes
1answer
124 views

Simplified Key Wrapping to Achieve Only Confidentiality?

I'm looking for help in understanding why the algorithm described here would not deliver adequate protection of confidentiality. We don't care about other criteria such as authenticity or integrity. ...
2
votes
2answers
888 views

Tweakable encryption algorithms vs Key wrapping

I have read many articles about Key wrapping and tweakable cipher modes. However, I don't understand the main difference between them? What you recommend for Key storage and Key Archive.
6
votes
1answer
302 views

Is it OK to use a data-encryption key for key wrapping, too?

Our industry (area of cheap networked devices) has a standard that defines the usage of keys for both authentication and encryption using EAX mode of AES. This standard does not define key management, ...
21
votes
2answers
9k views

Why do we need special key-wrap algorithms?

Wikipedia says: Key Wrap constructions are a class of symmetric encryption algorithms designed to encapsulate (encrypt) cryptographic key material. We are using these algorithms to encrypt (and ...
5
votes
1answer
2k views

How does a key wrapping like RFC 3394 secure my cryptographic keys?

So I'm messing around in the BouncyCastle library with the RFC 3394 AES Key Wrap engine and I'm trying to understand the benefit of it. The problem I'm running into is how to store keys securely on a ...