Questions tagged [key-wrap]

Key Wrap constructions are a class of symmetric encryption algorithms designed to encapsulate (encrypt) cryptographic key material.

9 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
1 answer

Can export of wrapped secret key to insecure storage be cryptographically secure?

I ask because some vendors of HSM try to avoid the export of wrapped secret key from HSM to insecure storage – storage that does not belong to these vendor’s HSM infrastructure. For example, Thales ...
Vlad's user avatar
  • 81
2 votes
0 answers

AES Keywrap implementation supporting 8 byte keys

NIST SP800-38F specifies key wrapping algorithms. An important distinction between KW (without padding) and KWP (with padding) seems to be that KW cannot be used to wrap keys of length 8 bytes i.e. 1 ...
sce's user avatar
  • 167
1 vote
0 answers

Wrap AES 256bit key with Argon2 without losing entropy

Given a random 256bit key used for data encryption with Streaming AES GCM I would like to wrap it for backup with AES GCM. Is it safe to use ...
zjmo's user avatar
  • 123
1 vote
0 answers

Generating Alternative Initial Value while wrapping keys with AES

Am following the instructions on ("AES Key Wrap with Padding Algorithm") and I have gotten to a point where I need to generate the <...
lulliezy's user avatar
  • 111
1 vote
0 answers

Did key-wrap modes see actual use?

Is there an IETF standard-track protocol have IANA-registered IDs for deterministic authenticated encryption yet? If not, what's preventing their adoption? What changes to protocols will DAEs likely ...
DannyNiu's user avatar
  • 9,001
0 votes
0 answers

AES-GCM with a fixed IV but a random "wrapped" key

It is well-known that AES-GCM requires the IV to be unique for each message that is encrypted with the same key. If the IV ever repeats, with the same key, then AES-GCM fails catastrophically. Now, ...
pogoya9172's user avatar
0 votes
0 answers

JSON Web Encryption (JWE) Key Wrapping Fundamentals - How To Encrypt Content Encryption Key?

The JSON Web Encryption RFC 7516 says: Encrypt the CEK with the recipient's public key using the RSAES-PKCS1-v1_5 [or RSAES-OAEP] algorithm to produce the JWE Encrypted Key. Assuming a client/server ...
Ronnie Royston's user avatar
0 votes
0 answers

Question about Asymmetric key wrapping using (limited) AES-GCM

assuming that I have an RSA key of length 4k bit which I'm interested to wrap using AES-GCM, and I have a (limited) AES-GCM cipher which can only encrypt limited input in size (say 256-bit/512-bit ...
Rami's user avatar
  • 1
0 votes
0 answers

Client-Side Encryption for a small app

I'm designing a small personal journal web application for my wife. I'm a crypto newb, but I want her to feel secure knowing only she will have access to her journal entries. I am thinking of the ...
Wolt's user avatar
  • 1