Questions tagged [keys]

Private and secret keys consists of secret information used as input to various kinds of cryptographic algorithms such as encryption, signature and MAC to select the concrete transformation done by the algorithm.

Filter by
Sorted by
Tagged with
0
votes
1answer
27 views

Disk storage of RSA and DSA keys

I have generated one RSA-2048 signing key and one DSA-2048 signing key, using gpg command gpg --full-generate-keys I would expect the key to have size 2048 bits, ...
0
votes
0answers
27 views

Prove linkage between secret keys

Hey guys I'm not a crypto expert so apologies if the question is especially noobish. We have a web application that requires the user to sign certain messages. We have been storing the secret key in ...
0
votes
0answers
9 views

How to store private keys in browsers after Apple's decision to wipe script-writeable storage? [migrated]

We have a web application that puts a private key in LocalStorage, which enables users to sign off certain messages. It's been working fine until today we saw this announcement from Apple, https://...
2
votes
2answers
52 views

Motivation for frequent key updates

I am wondering if there is any reason to regularly update cryptographic keys, that are used for authentication purposes in a real-time system. A key should be updated if it is weak, broken, ...
0
votes
0answers
20 views

How to calculate new AES keys for NFC application?

I want to program a couple of AES-enabled NFC tags (for example these) with some custom data, and secure these tags by using the AES features of said tags . In order to increase security, i want to ...
0
votes
1answer
27 views

Encrypting Data with user + custodian private keys

I want to be able to have a private user key (system generated) which, if destroyed, effectively renders all user data unrecoverable. This key would be used across the entire system to protect the ...
0
votes
0answers
37 views

Perfectly secure cryptosystem as many keys as plaintexts

Is a cryptosystem perfectly secure if there are at least as many keys as there are plaintexts? My guess is yes but I am not sure, new to cyptosystems
-1
votes
1answer
47 views

Storing public key in cookie

I am encrypting my password before sending to my server with a public that i have stored as a cookie. Is there any security risks storing my public key in the cookie? Are there any better ...
0
votes
0answers
30 views

Prove that for key with $n$ dimensions, the order of the key is $k!$

I need to prove, that for a key with $n$ dimensions, they order of the key would be $n!$ and to prove that, I need to use mathematical induction: $$\text{Let n = 1} \Rightarrow {1} \text{ if there ...
0
votes
0answers
48 views

Trying to understand how the same secret key end up being calculated between Alice and Bob

This is basically a duplicate of this question which was not answered very clearly. From the documentation, these are the calculations that happen for Alice to compute the shared secret key: ...
0
votes
0answers
19 views

PCI - Limit Key Injection Capabiltiy 3DES + DUKPT

Current Context: I'm using a Triple DES with a DUKPT Key Management Approach. I have two organization which have access to the BDK Key: Orgzanization 1 which acts as the Secure Decryption ...
2
votes
1answer
90 views

Key Exchange vs Key Encapsulation

From what I understand, the steps of a key exchange protocol are Alice and Bob each encrypt something using their public key and private key and send the result to each other Alice and Bob each do ...
0
votes
0answers
37 views

BIP32 Extended Key to EC Private and Public Key Pair

We are working on an application in Android using Java. In our project, we used to generate EC key pairs (of size 384 bits) using SpongyCastle - an old Android version of Bouncy Castle. The problem ...
0
votes
0answers
42 views

Computing PGP ed25519 and curve25519 keygrips?

There are public key algorithmic differences for how PGP computes fingerprints and keygrips. For the v4 protocol, fingerprints are not exclusively computed from public keys while keygrips are. RFC ...
1
vote
1answer
39 views

AES key with DES3_CBC_PAD mechainsm

I am new to cryptography and have a question. If I try to wrap some key using an AES key using DES3_CBC_PAD as a wrapping mechanism will this go to work? I am doing this operation inside an HSM.
0
votes
2answers
84 views

RSA p and q size to encipher a block

I have a plaintext about 18 bit size. I have to encipher it using RSA. How large have to be p and q? So M (message to encipher) = 2**18 bit I tried, using a Python coded RSA alghoritm, different sizes ...
9
votes
4answers
3k views

Why is the Keyspace of a Substitution Cipher not 2^26 but 2^88

It is known that a cipher has a keyspace of cryptographic algorithm whose key length is $n$ is given by $2^n$, but the keyspace of the substitution cipher is $2^{88}$ which is an approximation of $26!$...
1
vote
1answer
105 views

Key space math clarification

The following table specifies a cryptosystem based around a very simple encryption algorithm with four different plaintexts A, B,...
0
votes
0answers
45 views

Given algorithms A and B with 128bit & 256bit variants, is A128 AND B128 keys better, equal, or less strength than either A256, or B256?

I'm not comparing an algorithm specifically because I'm interested in the generic aspect of key lengths. If I'm wrong to do that then I could bring up particular sponge functions to use. The idea is ...
0
votes
1answer
61 views

RSA: least significant bit position in key

How can I show that $C' = 2^e·C^* \bmod N$ when it is decrypted will add zero bits in the least significant bit position of the key? I am not sure if the cause is multiplying by a ciphertext which ...
2
votes
1answer
58 views

Is Googles Envelope Encryption the same as Hybrid Encryption?

Google is advertising the use of Envelope Encryption in their products with their KMS. By the description, it sounds very much like Hybrid Encryption. But since I could not find any reference to ...
0
votes
0answers
27 views

If they exist a relation between decisional Diffie-Hellman assumption and composite decisional residuosity assumption

From the cryptographic hardness assumptions, we have DDH and CDR assumptions. It is known that the composite decisional residuosity assumption is related to a factoring problem, while the DDH is ...
0
votes
3answers
85 views

How HSM stores keys securely

when we say that HSM stores keys securely we mean that non-authoriszed requester cannot access the keys. but the key is stored physically anyway in the hardware, so access is still possible if the ...
1
vote
2answers
80 views

Generating Private Keys [closed]

First of all I want to say that I have exactly 0 knowledge how I can write something in Python. But I have some knowledge in math especially finite fields. That's why I want to learn more in writing ...
1
vote
1answer
60 views

Any known cases of lucky collisions resulting in security breaches?

This isn't a deep technical question, but I feel like this is a good place to ask. Modern cryptography generally rely on statistical chances of collisions according to current computing powers. Are ...
2
votes
0answers
871 views

Does encrypting the key with itself make it easier to crack the ciphertext? [duplicate]

As the title states; Is there any risk from encrypting the key with itself? EG. $C = AES(K=K, M=K)$ I'd assume not; after all, how does having the key for a safe inside the safe make it easier to ...
1
vote
1answer
64 views

Encrypt data. Create 5 keys. Just 3 keys are needed for decryption

I would like to encrypt some data and create 5 keys. These keys are stored in different places. If I want to decrypt the data I just need 3 of these 5 keys. Is there a way to do this?
0
votes
2answers
81 views

Would XOR'ing two Argon2 keys add extra security?

When a user registers on the app, they need to provide a password they create and we provide them with a randomly generated passphrase (e.g. Apple Cat Ladder Fire). We then use Libsodium's ...
1
vote
1answer
75 views

Difference between Key Scheduling and Key Generation?

I am a little bit confused in the terms i.e Key Scheduling and Key Generation. What is the actual difference between these two terms? According to Wikipedia, the terms are described as: Key ...
0
votes
2answers
95 views

Two possible plaintext's using OTP decryption

I am using this cipher-text c = 04 10 12 00 01 08 67 0A 19 65 0F 03 0A 00 with two possible keys ...
4
votes
2answers
151 views

Entropy preservation through cryptographic hash function

Background First, while studying MinEntropy a bit, I came across an NIST paper, "DRAFT SP 800-90B (second draft)," which suggests "twice" the entropy of the underlying block of a cryptographic hash ...
0
votes
1answer
79 views

RSA - Calculating $d$ given $\varphi (N)$ and $N$

From this discussion, I know that if I know $\varphi (N)$ and $N$ (where $N=pq$, $p$ and $q$ prime), then I can very easily get $p$ and $q$. Suppose I have the encrypted message $c$. I want to get ...
1
vote
2answers
118 views

How does this formula work $(aG + bG) = (a + b) G$ in ECDSA?

Please explain how does this formula $(aG + bG) = (a + b) G$ work in ECDSA? According to the source: $a$ and $b$ are different private keys Suppose $a = 3$ $b = 4$ then the public key is $Q = aG$...
1
vote
1answer
291 views

Determine the RSA private key from public key

I was told that you can determine the private key of an RSA encryption with the public key. I thought the point of a public key was to avoid letting people find the private key, but anyway, they said ...
1
vote
1answer
53 views

Is it possible to narrow down the possible keys used for AES CBC encryption, knowing a given plaintext and its ciphertext, where IV=0? [duplicate]

I'm brute forcing a ciphertext with a given dictionary to figure out which key was used. However, it's been hinted at that there is a way to narrow down the dictionary to a smaller subset of ...
5
votes
1answer
333 views

Are there any known problems or attacks for using SHA1(AES_key) as the HMAC key?

See this answer that explains the following sequence of operations: CipherText = IV|| AES(key1,iv,message) tag = hmac(key2,ciphertext) That answer says, You ...
2
votes
2answers
91 views

Is there a key exchange protocol that requires only one message?

Say I want to exchange a secret with someone, but I only get to send one message to the other person, and then we encrypt with that secret. Diffie-Hellman and ECDH require multiple messages to be sent ...
3
votes
2answers
684 views

Is it possible to identify a Serpent encryption key in memory?

It has been shown that AES keys that are in use can be identified in memory. This identification relies on discovering expected round keys in memory that are contained within the key schedule. My ...
2
votes
0answers
75 views

Extracting RC4 and 3DES keys from system memory

I have read papers [1], [2] that have presented techniques on extracting symmetric encryption keys from memory during the process of encryption. There are tools [3] that can extract AES keys from ...
1
vote
3answers
133 views

Expanding Key Material

Is there a way to take key material (for example 256 random bits for an AES key) and "expand" it over to a larger amount of data? Or can I go the opposite way and take a large amount of random data ...
0
votes
1answer
81 views

Which HMAC scheme more secure?

Which HMAC scheme is more secure? Or are they of the same level of security? Scheme One Compute a HMAC on the data to encrypt (cleartext/plaintext) Encrypt the data with AES_CTR_256, and append ...
0
votes
1answer
105 views

Is using the same MAC twice insecure?

I was thinking last night about whether or not a HMAC-Encrypt-HMAC would be secure if you used the same HMAC key. Here is the full recipe: Compute a HMAC on the data to encrypt, and append it to the ...
0
votes
1answer
82 views

How does tls 1.3 cope with man in the middle (in key exchange)

in case i cannot do PSK (give the same key to both sides via physical means). i saw tls1.3 still support DH (doesnt matter that it is DHE or ECDH). isnt that makes it a weak key exchange? do they ...
1
vote
2answers
104 views

AES-128 with doubled 8Byte key

Assuming I encrypt data with AES-128 and a random 8-byte key x in the following way: ...
2
votes
1answer
168 views

Related-key attacks against Salsa20 and ChaCha

From the Salsa20 security document, DJB states that he doesn't care about related key attacks: The standard solutions to all the standard cryptographic problems—encryption, authentication, etc.—are ...
31
votes
6answers
4k views

What is the practical impact of using System.Random which is not cryptographically random?

I recently noticed a .NET software using PBKDF to derive an encryption key from a password string. This password string was ...
0
votes
1answer
63 views

Is a symmetric encryption key derivable using the input and the output?

I am looking for a python library for encrypting a string with a single key. I do not want the key to derivable by knowing the input and the output. I have came to ...
5
votes
1answer
123 views

Are any block ciphers provably free of equivalent keys?

There are $2^n!$ possible permutations of an $n$-bit block cipher $E_k:\{0,1\}^n \rightarrow \{0,1\}^n$, and any given key $k$ selects one of these permutations at random. Define equivalent keys as a ...
2
votes
1answer
91 views

What is a randomly derived key?

It is a well-known fact that using the same key + nonce combination with a stream cipher twice breaks security. The NaCl library has different primitives for authenticated encryption (i.e., ...
3
votes
0answers
65 views

Do people sign my subkey?

So, I've generated my GPG key pair. Created a subkey for signing and a subkey for encryption. Exported the whole thing, removed my master key pair to a secure place, re-imported only the subkeys. Now, ...

1
2 3 4 5
14