Questions tagged [key-wrap]
Key Wrap constructions are a class of symmetric encryption algorithms designed to encapsulate (encrypt) cryptographic key material.
7
questions
5
votes
2
answers
2k
views
How is NIST's Key Wrap (using AES GCM) different than normal AES GCM Authenticated encryption?
From what I could gather, it seems like that NIST's key wrap (publication) provides similar security like AES-GCM Authenticated encryption. If this is true, why did we need a separate specification ...
- 71
0
votes
1
answer
300
views
Properly securing a private key for remote storage
I am attempting to secure a private key for remote storage on an untrusted device. Here are the parameters and my assumptions, I'd like to confirm I'm correct with them.
The keypair that I wish to ...
- 157
10
votes
1
answer
5k
views
What is the difference between "wrapping" a key and encrypting?
I wanted to implement a way to generate an RSA public/private key pair and protect the private key with a password.
Looking into the Web crypto api, I thought the ...
- 539
7
votes
1
answer
2k
views
How does a key wrapping like RFC 3394 secure my cryptographic keys?
So I'm messing around in the BouncyCastle library with the RFC 3394 AES Key Wrap engine and I'm trying to understand the benefit of it.
The problem I'm running into is how to store keys securely on a ...
- 823
6
votes
2
answers
6k
views
How much extra security does key wrapping provide?
Wikipedia says:
Key Wrap. Key Wrap constructions are a class of symmetric encryption algorithms designed to encapsulate (encrypt) cryptographic key material. The Key Wrap algorithms are intended ...
- 508
2
votes
1
answer
394
views
Can export of wrapped secret key to insecure storage be cryptographically secure?
I ask because some vendors of HSM try to avoid the export of wrapped secret key from HSM to insecure storage – storage that does not belong to these vendor’s HSM infrastructure.
For example, Thales ...
- 81
2
votes
1
answer
263
views
Double-CBC as AES-KW Substitute?
Background.
I'm trying to make a local command-line based password manager. So far, I've managed to make the output look dizzy on tty, and I plan to encode user credentials in individual 512-byte ...
- 9,001