Newest 'known-plaintext-attack' Questions

1

vote

1answer

34 views

Is it safe to distribute different portions of the same data encrypted with different AES keys?

Assume I have a block of data consisting of three segments A, B and C. With "segments" I mean a particular section of a bit stream, so if the whole binary data was simply ...

aes known-plaintext-attack

asked Mar 10 at 12:17

LWChris

1535 bronze badges

5

votes

2answers

110 views

Is the ChaCha20 block function reversible using known plaintext?

I've been recently implementing the chacha20 stream cipher with Poly1305. As the core operations which make up the Quarter Round of chacha20 (ARX - Addition Rotation Xor) are indeed reversible, does ...

asked Feb 15 at 9:17

Vivekanand V

53510 bronze badges

2

votes

1answer

98 views

How does one conduct a known-plaintext attack on an algorithm?

My question is two-fold: Say I am given a total black box and I have n number of plaintexts as inputs that map directly to $n$-number of ciphertexts as outputs. This is all I know, and I do not have ...

known-plaintext-attack

asked Feb 15 at 3:24

the_endian

1555 bronze badges

3

votes

1answer

133 views

How to secure Elliptic Curve ElGamal encryption against known plaintext attacks?

If I have an encoding function $f(x)$ that maps a message $m$ to a point $P$ on a suitable Elliptic Curve $E$ . If I have the public key $Q$ of my recepient then I can encrypt the message as follows: ...

elliptic-curves elgamal-encryption known-plaintext-attack

asked Feb 9 at 11:39

Vivekanand V

53510 bronze badges

0

votes

1answer

76 views

Recognizing and decrypting custom cipher with known plaintext and ciphertext

I've been trying to reconstruct an encryption algorithm that produces a known ciphertext from a know plaintext. I have done some analysis: the algorithm operates on single bytes a plain text can be ...

encryption stream-cipher known-plaintext-attack

asked Jan 5 at 23:15

Pruzo

193 bronze badges

1

vote

0answers

24 views

Known plain-text attack on Kerberos

This is a form of the Kerberos protocol I have two questions. Why does this protocol give the opportunity of a known plain-text attack because of no authentication of Joe? And how would an attacker ...

kerberos known-plaintext-attack

asked Dec 14 '19 at 17:57

nmq

111 bronze badge

3

votes

0answers

105 views

Why are cyclic keys in Feistel Networks insecure?

So everyone seems to agree that recurring round keys in a Feistel network (eg. using the same key for every round) are a massive security leak. When researching this, the only thing I found is the ...

block-cipher known-plaintext-attack feistel-network

asked Nov 30 '19 at 16:00

Lukor

1651 silver badge6 bronze badges

1

vote

1answer

113 views

XChacha20poly1305 vulnerability to known plaintext attacks

During a security audit, the guy said our cryptosystem is vulnerable to known-plaintext attacks. He said that's because «the implementation uses a crypto_stream_xor() approach» (from libsodium). That'...

passwords known-plaintext-attack salsa20

asked Oct 30 '19 at 13:40

Chacha123

113 bronze badges

1

vote

1answer

53 views

Is it possible to narrow down the possible keys used for AES CBC encryption, knowing a given plaintext and its ciphertext, where IV=0? [duplicate]

I'm brute forcing a ciphertext with a given dictionary to figure out which key was used. However, it's been hinted at that there is a way to narrow down the dictionary to a smaller subset of ...

keys symmetric cbc brute-force-attack known-plaintext-attack

asked Oct 18 '19 at 23:50

Alex

111 bronze badge

2

votes

0answers

182 views

Known Plain-text Attack [closed]

How can I find the known plain text P2 based on the given information? Assuming that the encryption is made using a common initialization vector and the mode used for encryption is OFB. ...

known-plaintext-attack ofb decryption

asked Oct 11 '19 at 14:11

faizan

211 bronze badge

2

votes

0answers

67 views

Encrypted ZIP and plain text attack [duplicate]

I have a Zip archive containing a single password-protected file file.txt. The encryption is "ZIP 2.0 Default Encryption" (ZipCrypto). I know what kind of text (...

known-plaintext-attack password-based-encryption

asked Oct 6 '19 at 17:34

leg020

212 bronze badges

3

votes

1answer

133 views

Why is the Domingo-Ferrer cryptosystem not used in practice?

The Domingo-Ferrer cryptosystem is a fully homomorphic cryptosystem. It works fast enough. I have only seen known-plaintext attacks. Is this a reason not to use it in practice? Or are there more ...

homomorphic-encryption attack known-plaintext-attack

asked Sep 22 '19 at 17:49

hey

332 bronze badges

2

votes

0answers

47 views

Known-plaintext attack against E0 with 2745 bits per frame instead of 24

In the paper The Conditional Correlation Attack: A Practical Attack on Bluetooth Encryption, an attack against the E0 cipher is described which can break it efficiently in a known-plaintext attack: ...

known-plaintext-attack lfsr e0

asked Aug 25 '19 at 7:42

forest

10.4k1 gold badge31 silver badges64 bronze badges

1

vote

1answer

76 views

Cipher recommendation for known-plaintext attack

I need to encrypt a 4-digit number. The cipher-text can be up to 11 digits long and there are no limits for the key size. Considering that the attacker has access to both the cipher-text and the ...

known-plaintext-attack

asked Aug 15 '19 at 14:51

Miguel

132 bronze badges

0

votes

0answers

28 views

What are some best practices to handle user password in shell script and environment variables?

I'm new to this community. Currently im working on a project which involves handling user password in shell script. Following steps describe my password consumption flow: Get password from user ...

known-plaintext-attack password-based-encryption

asked Aug 13 '19 at 10:20

learningloop

1011 bronze badge

2

votes

1answer

163 views

How many required known plaintexts for an attack are considered insecure?

I stumbled over this problem when looking at symmetrical block ciphers with a relatively small block size like 32 bit. When I was looking at more common block ciphers with a 64 bit, I learned that ...

block-cipher known-plaintext-attack chosen-ciphertext-attack blocksize

asked Jul 21 '19 at 17:57

jonhue

1234 bronze badges

2

votes

1answer

199 views

Hill cipher: How to find an unknown key of unknown size

How would you tackle the problem of finding the key (you don't know the length) to a Hill cipher when knowing only one 12-letter word of plaintext and its corresponding ciphertext? CONVERSATION has ...

known-plaintext-attack hill-cipher

asked Jun 19 '19 at 10:59

Christo Todorov

211 bronze badge

0

votes

0answers

55 views

Unique numbers with $P^aQ^bR^c \mod N$ for each combination of $a,b,c$ possible? Would it be safer than separate form (like $T^a \mod P$ for each)?

Main question: Is the computation of $a,b,c$ in $P^aQ^bR^c \mod N$ (much) harder than in $T_p^a \mod P$, $T_q^b \mod Q$, $T_r^c \mod R$ ? (assuming the first form exists) $P^aQ^bR^c \mod N$ With $P^...

cryptanalysis algorithm-design attack known-plaintext-attack

asked Apr 20 '19 at 10:09

J. Doe

4311 silver badge12 bronze badges

0

votes

1answer

44 views

How much more secure is $c = mg_1^r + g_2(g_1(g_1^r-1)/(g_1-1)) \mod p$ compared to just $c = mg_1^r \mod p$ (dis. log), all known but $r$?

To encode a message $m$ to a cipher $c$ you can use the only hard solvable problem of computing the discrete logarithm with a generator $g$ in base over a prime $p$. $c = mg_1^r$ mod p If an ...

cryptanalysis algorithm-design elgamal-encryption attack known-plaintext-attack

asked Apr 19 '19 at 19:09

J. Doe

4311 silver badge12 bronze badges

1

vote

1answer

115 views

IV Re-use and Chosen Plaintext against 56bit Blowfish (CBC)

I am looking at a very old protocol which uses Blowfish to encrypt packets with a constant 8-byte IV in CBC mode. Assuming I have: The ability to arbitrary encrypt known plaintexts The IV I know ...

cbc initialization-vector known-plaintext-attack key-reuse blowfish

asked Mar 27 '19 at 13:58

pavja2

1112 bronze badges

0

votes

1answer

230 views

how to compute IV with AES CTR if key, plaintext and ciphertext are known?

Given $E_k$, which a block-cipher using the (known) key $k$, and a plaintext-ciphertext pair $(p,c)$ where $c$ is the encryption of $p$ using CTR mode, can the initialization vector be recovered using ...

aes initialization-vector ctr known-plaintext-attack

asked Feb 23 '19 at 13:56

lclevy

32 bronze badges

0

votes

0answers

32 views

Is it necessary to study the KPA security for asymmetric encryption algorithms in addition to CPA security? [duplicate]

In a KPA attack model, an adversary $\mathcal{A}$ has access to pairs of messages $(m_i,c_i)$ which are encrypted using some asymmetric algorithm. However, assuming either El-Gamal or RSA algorithms, ...

public-key chosen-plaintext-attack known-plaintext-attack

asked Feb 6 '19 at 7:15

Ali Shakiba

1134 bronze badges

1

vote

0answers

227 views

show that G' is not a secure PRG even if G is

Hello I'm trying to show that the function G'(s) = G(s) || G(G(s)) is not a secure PRG even if G is. My first question is that in this case, how do I know what G ...

pseudo-random-generator attack known-plaintext-attack

asked Feb 4 '19 at 0:37

Martin

1111 bronze badge

2

votes

1answer

477 views

AES-CBC ciphertext manipulation with known IV and plaintext! [duplicate]

I'm currently practicing on a purposely flawed login page, where I have to change the value of a cookie to enter. The cookie is an encrypted and encoded form of a simple JSON string with fields "admin"...

aes known-plaintext-attack

asked Jan 25 '19 at 4:28

sp4rr0w

232 bronze badges

2

votes

0answers

84 views

Is my deniable encryption scheme reasonable?

I was experimenting with RubberhoseFS, but since it is very hard to compile on anything modern, I decided to implement my own version, stripped of many unnecessary features. Namely, my implementation ...

key-derivation known-plaintext-attack deniable-encryption

asked Jan 11 '19 at 11:17

programagor

1213 bronze badges

7

votes

3answers

5k views

Is it possible to find the key for AES ECB if I have a list of plaintext and corresponding ciphertext?

Assume I have a list of plaintext text and its corresponding ciphertext which was created using a specific key with AES in ECB mode. Can I recover that key? If, how big does the list of plaintext ...

aes attack known-plaintext-attack ecb

asked Nov 11 '18 at 18:30

Richard Jones

1811 silver badge3 bronze badges

1

vote

1answer

665 views

Known Plaintext Attack for Modified OFB Mode of Operation

Question: Assume a variant of the OFB mode by which we only feedback the 8 most significant bits of the cipher output. We use AES and fill the remaining 120 input bits to the cipher with 0's: Why is ...

block-cipher modes-of-operation known-plaintext-attack

asked Oct 26 '18 at 15:31

esra

6396 silver badges12 bronze badges

4

votes

1answer

867 views

Known Plaintext Attack on Block Cipher in ECB and CBC Modes of Operations

These 2 similar questions are from Paar's Understanding Cryptography. I could not see the answer so if someone can help I will appreciate: Question1: We consider known plaintext attacks on block ...

block-cipher modes-of-operation known-plaintext-attack

asked Oct 25 '18 at 20:25

esra

6396 silver badges12 bronze badges

1

vote

1answer

128 views

Ethereum RLPx protocol for inter-node communication - flaws in the encryption

Ethereum uses RLPx/devp2p for inter-node communication. The protocol is encrypted using Elliptic Curve Integrated Encryption Scheme (see ref) Under Known-Issues I found this paragraph: The RLPx ...

encryption ctr known-plaintext-attack cryptocurrency ecies

asked Oct 11 '18 at 21:05

ivicaa

1135 bronze badges

1

vote

1answer

127 views

It's safe to store a known value (for checking) next to the actually encrypted values

The high level details of the encryption I'm using is: AndroidKeyStore create/store RSA key AES key is created and wrapped with RSA/ECB/PKCS1Padding Encrypted AES is saved to disk. Data is encrypted ...

known-plaintext-attack aes-gcm

asked Aug 1 '18 at 12:28

Budius

1334 bronze badges

2

votes

3answers

540 views

Known-plaintext attack on 1-round Feistel networks

Consider a simple, 1-round Feistel network. Because the ciphertext is essentially $(L_1,R_1)$, if one knows the plaintext $(L_0,R_0)$, the only unknown left is $K$. However round functions in ...

known-plaintext-attack feistel-network

asked Jun 21 '18 at 14:27

DBor

212 bronze badges

2

votes

1answer

174 views

Is Paillier secure from known plaintext attack for single character message?

Assuming I have three messages m1,m2,m3 where m1=m2=m3=1 and I compute c1,c2 and c3. Does that mean that c1=c2=c3 in cipher-text from ? If not, how many times can I encrypt a message m=1 and still ...

public-key cryptanalysis homomorphic-encryption known-plaintext-attack paillier

asked May 21 '18 at 16:55

Tyler D Law

354 bronze badges

1

vote

0answers

29 views

Would it possible to decode an intelligible but alien message? [duplicate]

I've been reading some sci-fi and there is a frequent mention of decoding alien signals. From what i read historically in ww2 for decoding enemy message the allies would transmit fake information ...

block-cipher stream-cipher known-plaintext-attack

asked Mar 26 '18 at 18:32

Allahjane

1111 bronze badge

1

vote

1answer

515 views

Clarification on Hill Cipher crib dragging technique

--- this has been edited as I realised the question was silly. replaced with helpful information --- I want to confirm the following: Given ciphertext "AGHTDIX... [cont.]" (C) and crib (a word ...

classical-cipher known-plaintext-attack hill-cipher

asked Mar 23 '18 at 1:25

user8339

4

votes

1answer

231 views

Cracking truncated DES

Let's say we have a scheme in which 40 bits M are padded with 24 zeroes, encrypted using a secret DES key K, and the result truncated to the first 24 bits, C. If I wanted to determine a key that ...

des known-plaintext-attack

asked Feb 26 '18 at 11:16

Columbo

1434 bronze badges

3

votes

1answer

741 views

What's the difference between a known-plaintext attack and a ciphertext-only attack in terms of performance?

I know that in the KPA the attacker has access to both the plaintext and the ciphertext, but in the end it all comes down to performing an exhaustive key search. I'm not sure if having the ...

known-plaintext-attack ciphertext-only-attack

asked Feb 22 '18 at 4:20

Trey

1139 bronze badges

0

votes

1answer

441 views

8th SharifCTF — What is the advisable way to recover the key of single round DES here?

I am participating in the 8th SharifCTF competition and have a related question: I have 1000 plaintext and its ciphertext, which has been encrypted with DES algorithm (only 1 round). Now, how can ...

keys des known-plaintext-attack

asked Feb 2 '18 at 9:56

amir

1485 bronze badges

2

votes

2answers

129 views

If an attacker has a chosen-plaintext and encrypted data, can they determine the encryption type?

This question differs from How to determine what type of encoding/encryption has been used?, which asked about a ciphertext-only attack. This question is asking about a chosen-plaintext attack. Let's ...

encryption known-plaintext-attack

asked Jan 9 '18 at 20:00

Stevoisiak

1213 bronze badges

0

votes

2answers

144 views

Reversability of Xor'd Values In Hash?

This may be a dumb question so please forgive me if so, but is a hash function considered one-way even if you have half of an xor'd value? For example say I have the values R and C, both are randomly ...

hash known-plaintext-attack

asked Dec 22 '17 at 18:19

CoryG

5002 silver badges9 bronze badges

1

vote

0answers

63 views

Question on recovering a key in the algorithm

Let $E$ be a block cipher that has block size and key size both equal to 64 bits. Let $E'$ be a block cipher that has 64-bit block size and is defined as follows: For a 128 bits key $K \mathbin\Vert ...

encryption keys known-plaintext-attack

asked Dec 8 '17 at 8:18

KengoTokukawa

111 bronze badge

1

vote

2answers

137 views

Multiple XML files and known-plaintext attack

I have created an app which collects data in sets which may contain up to 20000 XML files of an average size of about 5 KB, and all with the same header and XML structure, so that only the data they ...

aes implementation known-plaintext-attack key-reuse

asked Dec 4 '17 at 0:00

Rado

132 bronze badges

2

votes

0answers

110 views

Known Plaintext Attack A5/2

I am trying to understand the non-optimized known plaintext attack on A5/2 from Barkan, Bikan and Keller. I don't understand the construction of the equation system: $$S_{R4_1} * S_1 = k$$ Where $S$ ...

cryptanalysis stream-cipher known-plaintext-attack linear-cryptanalysis

asked Dec 1 '17 at 14:58

Schroder22

211 bronze badge

2

votes

2answers

2k views

Known plaintext attack without knowing the location of the plaintext

I'm trying to understand known plaintext attacks and since I best learn by doing I broke out Python and did the following: I have a plaintext string s and a key <...

encryption xor known-plaintext-attack

asked Dec 1 '17 at 9:52

siebz0r

1235 bronze badges

4

votes

2answers

670 views

Why does DESX break if one removed post whitening?

DESX uses whitening to strengthen against brute force attacks. What is an attack one could use to recover DESX's pre-whitening key with only two known ciphertext/plaintext pairs, given that the ...

symmetric known-plaintext-attack desx

asked Nov 26 '17 at 16:07

RenWal

453 bronze badges

1

vote

0answers

645 views

Known plaintext attack against Feistel ciphers

Assuming we have a Feistel cipher, with let's say 2 rounds i.e: Plaintext $P=(L_{0},R_{0})$ $L_{1}=R_{0}$ $R_{1}=L_{0}\oplus f_{{K}_{1}}(R_{0})$ $L_{2}=R_{1}$ $R_{2}=L_{1}\oplus f_{{K}_{2}}(R_{1})...

cryptanalysis known-plaintext-attack feistel-network

asked Oct 24 '17 at 18:56

echoeida

111 bronze badge

1

vote

1answer

58 views

While encrypting what can happen between words

From some time I am working with "pen and paper" encrypted text. Keys are not known, algorithm is not known. I managed to find simple algorithm and key that seems to be nearly perfect. Nearly perfect ...

cryptanalysis known-plaintext-attack pen-and-paper

asked Oct 19 '17 at 6:18

oen

195 bronze badges

0

votes

1answer

169 views

Whats the most secure way to encrypt a string without the use of a computer? [duplicate]

I want to decrease attack surface by preventing the plaintext string or encryption key from ever being typed or otherwise entered into a computer. Ideally the decryption key would be something that ...

encryption symmetric known-plaintext-attack pen-and-paper

asked Oct 5 '17 at 16:22

the8thbit

112 bronze badges

2

votes

1answer

4k views

AES-ECB known ciphertext/plaintext attack

i'm new to crypto and am working on a little exercise to understand the weakness of ECB mode encryption. Here is the scenario. I have the plain text ...

aes known-plaintext-attack ecb

asked Sep 17 '17 at 17:34

JohnnyHunter

1451 silver badge4 bronze badges

1

vote

0answers

72 views

Decrypting AES with known properties of plaintext

Austria passed a law recently which requires all invoices for cash-transactions to carry a QR-Code, that is signed by a government-registered certificate-authority. Each code contains public ...

cryptanalysis known-plaintext-attack

asked Sep 14 '17 at 10:57

Fabian Zeindl

1111 bronze badge

1

vote

1answer

481 views

Is my XTEA encryption key safe if I publish my firmware both as plain text and encrypted?

I'm using this bootloader that implements XTEA encryption for uploading an encrypted firmware to small MCU: https://github.com/nyholku/diolan-plus2 the actual XTEA code is here: https://github.com/...

known-plaintext-attack

asked Jul 19 '17 at 19:20

nyholku

132 bronze badges

Questions tagged [known-plaintext-attack]

Related Tags