Unanswered 'known-plaintext-attack' Questions

3

votes

0answers

183 views

Why are cyclic keys in Feistel Networks insecure?

So everyone seems to agree that recurring round keys in a Feistel network (eg. using the same key for every round) are a massive security leak. When researching this, the only thing I found is the ...

asked Nov 30 '19 at 16:00

Lukor

1652 silver badges7 bronze badges

3

votes

0answers

571 views

Avoiding known plaintext attacks with an additional XOR-Layer

Can a cipher that is vulnerable to an known plaintext attack be made secure by adding an additional XOR-encryption? That is: suppose I have an (w.l.o.g. symmetric) encryption algorithm E were the ...

encryption protocol-design known-plaintext-attack

asked May 11 '15 at 14:09

icehawk

2651 silver badge5 bronze badges

2

votes

0answers

56 views

Known-plaintext attack against E0 with 2745 bits per frame instead of 24

In the paper The Conditional Correlation Attack: A Practical Attack on Bluetooth Encryption, an attack against the E0 cipher is described which can break it efficiently in a known-plaintext attack: ...

known-plaintext-attack lfsr e0

asked Aug 25 '19 at 7:42

forest

11k1 gold badge33 silver badges68 bronze badges

2

votes

0answers

88 views

Is my deniable encryption scheme reasonable?

I was experimenting with RubberhoseFS, but since it is very hard to compile on anything modern, I decided to implement my own version, stripped of many unnecessary features. Namely, my implementation ...

key-derivation known-plaintext-attack deniable-encryption

asked Jan 11 '19 at 11:17

programagor

1213 bronze badges

2

votes

0answers

121 views

Known Plaintext Attack A5/2

I am trying to understand the non-optimized known plaintext attack on A5/2 from Barkan, Bikan and Keller. I don't understand the construction of the equation system: $$S_{R4_1} * S_1 = k$$ Where $S$ ...

cryptanalysis stream-cipher known-plaintext-attack linear-cryptanalysis

asked Dec 1 '17 at 14:58

Schroder22

211 bronze badge

2

votes

0answers

702 views

Known plaintext attack against Feistel ciphers

Assuming we have a Feistel cipher, with let's say 2 rounds i.e: Plaintext $P=(L_{0},R_{0})$ $L_{1}=R_{0}$ $R_{1}=L_{0}\oplus f_{{K}_{1}}(R_{0})$ $L_{2}=R_{1}$ $R_{2}=L_{1}\oplus f_{{K}_{2}}(R_{1})...

cryptanalysis known-plaintext-attack feistel-network

asked Oct 24 '17 at 18:56

echoeida

211 bronze badge

2

votes

0answers

168 views

AES-128: How to find cipherkey comparing wrong and right ciphertexts?

I have a .mat file which contains 10 plaintexts and 10 ciphertexts which are correctly encrypted with AES-128 algorithm. It also contains 10 more ciphertexts which are wrongly encrypted. The fault is ...

encryption aes known-plaintext-attack chosen-ciphertext-attack side-channel-attack

asked Jan 22 '17 at 15:43

MPA

1211 bronze badge

2

votes

0answers

76 views

Recover secret $x$ when $c\equiv m^x \pmod p$ with public $p$ (modified)

Given an encryption system where $c\equiv m^x \pmod p$, $p$ is a known prime, 1. Is it possible to recover $x$ with a known plaintext attack? Given $(p,\text{factorization of }\varphi(p),m,c)$ 2. Is ...

discrete-logarithm modular-arithmetic chosen-plaintext-attack known-plaintext-attack

asked Jan 10 '16 at 14:54

NightRa

1213 bronze badges

1

vote

0answers

38 views

Memory required for known plaintext attack on general block cipher

Consider a block cipher on binary strings of length $k$ and keys which can be any binary string of length $n$. With $k2^n+k$ memory we can store all key/ciphertext pairs for a fixed plaintext and this ...

block-cipher known-plaintext-attack

asked May 21 '20 at 17:08

zz7948

1858 bronze badges

1

vote

0answers

36 views

Known plain-text attack on Kerberos

This is a form of the Kerberos protocol I have two questions. Why does this protocol give the opportunity of a known plain-text attack because of no authentication of Joe? And how would an attacker ...

kerberos known-plaintext-attack

asked Dec 14 '19 at 17:57

nmq

111 bronze badge

1

vote

0answers

308 views

show that G' is not a secure PRG even if G is

Hello I'm trying to show that the function G'(s) = G(s) || G(G(s)) is not a secure PRG even if G is. My first question is that in this case, how do I know what G ...

pseudo-random-generator attack known-plaintext-attack

asked Feb 4 '19 at 0:37

Martin

1111 bronze badge

1

vote

0answers

64 views

Question on recovering a key in the algorithm

Let $E$ be a block cipher that has block size and key size both equal to 64 bits. Let $E'$ be a block cipher that has 64-bit block size and is defined as follows: For a 128 bits key $K \mathbin\Vert ...

encryption keys known-plaintext-attack

asked Dec 8 '17 at 8:18

KengoTokukawa

111 bronze badge

1

vote

0answers

417 views

Encryption with both plaintext and ciphertext public

Does there exist a system wherein the encryption key/algorithm can be made indecipherable despite making arbitrarily many plaintext and ciphertext pairs available to the cracker? (Does this qualify as ...

known-plaintext-attack

asked Feb 26 '17 at 15:18

Soham

1512 bronze badges

1

vote

0answers

295 views

Affine cipher finding the decryption map

Given two letters of the plaintext 'ZP' corresponding to the ciphertext 'AE' respectively, I have found the key to be (a,b)=(10,10) (modulo 26). Therefore the decryption map $D(x)=a^{-1}(x-a)\bmod26$ ...

modular-arithmetic known-plaintext-attack affine-cipher

asked Jan 28 '17 at 14:30

user43397

111 bronze badge

1

vote

0answers

820 views

Obtain Enigma key having a encrypted text and the plain text

I have an Enigma message and I know what the original message is (a repetition of the same letter). Is it possible obtain the enigma key? I only know what kind of Enigma machine is it, but I need to ...

known-plaintext-attack enigma

asked Oct 23 '15 at 10:23

poker

412 bronze badges

1

vote

0answers

78 views

Encryption with a known plaintext

I'm building an application where users can be a part of groups, and can obtain and distribute URLs from the group page that allow anyone who clicks on them to join said group. Groups should not ...

protocol-design symmetric known-plaintext-attack

asked Mar 14 '15 at 23:51

Owen K.

113 bronze badges

0

votes

0answers

25 views

PKCrack with partial known plaintext not working

So I have a .zip-archive containing a password protected .doc-file that I need to recover. It was encrypted with ZipCrypto in 7-Zip. My idea was to do a known-plaintext attack with PKCrack. I'm pretty ...

known-plaintext-attack password-based-encryption

asked 2 days ago

etw0

1

0

votes

0answers

34 views

Known Plain Text Attack DES-OFB on Crack.sh

I am trying to do a known plaintext attack on DES-OFB through crack.sh. I have been having trouble lately. I keep getting blank text file back with no keys returned. Does anybody know if DES-OFB is ...

encryption des brute-force-attack known-plaintext-attack ofb

asked Dec 18 '20 at 4:25

bambi

11 bronze badge

0

votes

0answers

37 views

Known plaintext attack on AES with CBC

Assume I have a plaintext and a ciphertext, encrypted using some key and AES with CBC mode. I don't have a service, that I can send something to, so I can't use the Padding Oracle attack. Are there ...

aes cbc known-plaintext-attack

asked Dec 11 '20 at 15:53

Anegng

11 bronze badge

0

votes

0answers

71 views

How to perform a known plaintext attack?

I have got the following documents: (1) The plaintext (2) The ciphertext (3) The python program used to encrypt/decrypt the text My goal is to find the key that was used to encrypt the plaintext into ...

encryption known-plaintext-attack decryption

asked Oct 3 '20 at 1:37

Holly Iveburn

1

0

votes

0answers

82 views

RNG to hide some bits

Suppose I have a sequence of bits of length M. I need to hide N out of M bits (hiding means forcing them to be 0) using RNG with a key. How I can relate the output of RNG to the number and positions ...

encryption keys random-number-generator known-plaintext-attack chosen-ciphertext-attack

asked Jun 24 '20 at 9:43

Riva11

355 bronze badges

0

votes

0answers

34 views

What kind of approach can I use to reverse the following encryption scheme?

I'm trying to reverse an encryption scheme without success. I have several pairs of ciphertext + plaintext and found the encryption method to be something like this: ...

cryptanalysis keys known-plaintext-attack

asked Jun 21 '20 at 2:50

Miguel Ángel

1

0

votes

0answers

57 views

Unique numbers with $P^aQ^bR^c \mod N$ for each combination of $a,b,c$ possible? Would it be safer than separate form (like $T^a \mod P$ for each)?

Main question: Is the computation of $a,b,c$ in $P^aQ^bR^c \mod N$ (much) harder than in $T_p^a \mod P$, $T_q^b \mod Q$, $T_r^c \mod R$ ? (assuming the first form exists) $P^aQ^bR^c \mod N$ With $P^...

cryptanalysis algorithm-design attack known-plaintext-attack

asked Apr 20 '19 at 10:09

J. Doe

4712 silver badges12 bronze badges

Stack Exchange Network

current community

your communities

more stack exchange communities

Questions tagged [known-plaintext-attack]

Why are cyclic keys in Feistel Networks insecure?

Avoiding known plaintext attacks with an additional XOR-Layer

Known-plaintext attack against E0 with 2745 bits per frame instead of 24

Is my deniable encryption scheme reasonable?

Known Plaintext Attack A5/2

Known plaintext attack against Feistel ciphers

AES-128: How to find cipherkey comparing wrong and right ciphertexts?

Recover secret $x$ when $c\equiv m^x \pmod p$ with public $p$ (modified)

Memory required for known plaintext attack on general block cipher

Known plain-text attack on Kerberos

show that G' is not a secure PRG even if G is

Question on recovering a key in the algorithm

Encryption with both plaintext and ciphertext public

Affine cipher finding the decryption map

Obtain Enigma key having a encrypted text and the plain text

Encryption with a known plaintext

PKCrack with partial known plaintext not working

Known Plain Text Attack DES-OFB on Crack.sh

Known plaintext attack on AES with CBC

How to perform a known plaintext attack?

RNG to hide some bits

What kind of approach can I use to reverse the following encryption scheme?

Unique numbers with $P^aQ^bR^c \mod N$ for each combination of $a,b,c$ possible? Would it be safer than separate form (like $T^a \mod P$ for each)?

Hot Network Questions

Questions tagged [known-plaintext-attack]

Related Tags