Questions tagged [password-based-encryption]
Encryption using a key derived from a password or passphrase entered by the user.
169
questions
0
votes
0
answers
30
views
Generic encryption & decryption module - question regarding password stretching & salt
We want to implement an encryption / decryption module that we want to provide to different internal components of our system (internal library for internal components).
The component will provide (...
- 786
0
votes
1
answer
323
views
When trying to break a PBKDF2 SHA512 hash, how fast is an RTX 4090 or similar GPU with the given parameters
I'm writing a paper for uni about password security, specifically about cracking passwords in the context of a password manager. I've coded a password encryption scheme which uses PBKDF2(SHA512) to ...
1
vote
1
answer
178
views
How strong should my password manager's master password be?
I use an offline password manager, I want to use a future proof very strong master password and I'm going to choose one of these options from the EFF's large wordlist, a randomly chosen 8 word ...
- 11
2
votes
3
answers
122
views
Long Random Key and XOR - How Secure?
I have an application that encrypts files in the following manner (I think I can hear sighs already but bear with me):
Start with two byte arrays generated from random strings of lengths l1 and l2 (...
- 23
0
votes
0
answers
207
views
How to extract a private key from .PFX file to .PEM file using AES-GCM as a password-based encryption?
I'm trying to extract a private key from a .PFX file to a .PEM file format. I was able to do it using Aes128Cbc in either .NET or OpenSSL:
.NET:
...
0
votes
0
answers
66
views
Password Manager desktop app
I have built a small password manager desktop app using python. This app falls under the master-password model.The app connects to two databases stored locally. The first database stores the users ...
- 1
2
votes
1
answer
193
views
Best practices on implementing a password manager
I'm a dev new to security and cryptography.
I'm writing a password manager and Time-based OTP combo in dart/flutter to use in multiple devices and platform for fun and use it personally for real. I ...
1
vote
0
answers
34
views
Can I use a password hash to encrypt the private key of a bigger block size?
I have private keys that are close to 2kb big.
Now I want to password encrypt them in the following manner.
Generate the private key of an asymmetric encryption algorithm (public key can be derived ...
- 11
2
votes
1
answer
56
views
Storing length of encrypted data
I need to encrypt some user's data. However to make it more apparent to the user what data is stored in each key, I was thinking to also store the length of the actual data along the cipher.
E.g.
<...
- 121
1
vote
1
answer
76
views
Understanding symmetric encryption security in relation to password-based key derivation
Here are some assumptions on which the question is based. If anything is wrong with this, please point this out straight away:
Let's say I have a file I want to encrypt with AES256 symmetric ...
- 13
2
votes
3
answers
2k
views
Number of characters in 64-bit and 128-bit password
I have a simple question but I can't seem to find the answer of.
I know that
A 128-bit hash contains 32 characters since each represents a hexadecimal.
Similarly, a 64-bit hash would contain 16 ...
1
vote
0
answers
56
views
Custom key for key wrapping using JOSE/JWK
I am trying to figure out how to use a custom password with a JWK that uses the password for key wrapping. The JWA spec contains for example "PBES2-HS512+A256KW", which does "PBES2 with ...
- 121
4
votes
2
answers
519
views
Does combining multiple PBKDF2 keys result higher iteration count when using same password but different salts?
I did some experimenting with web subtle crypto.
I derived a key using PBKDF2 with SHA-512 and 100 000 iterations and timed it.
Doing same with 200 000 rounds doubled the time as expected.
Then I did ...
- 43
1
vote
1
answer
45
views
What qualifies as a key?
For my own project and the fun of it I have created an algorithm that turns plain text into cipher by interacting between entered text and a given password. My question is, in this instance, does the ...
- 21
3
votes
0
answers
601
views
Algorithm used to generate a BitLocker recovery key
I know exactly how a generated BitLocker recovery key works and I can write a code to brute-force it.
How is the recovery key generated though?
I could think of some answers:
it is generated using an ...
- 165
1
vote
1
answer
386
views
Is it ok to create secret by signing known data (string) with RSA private key?
Imagine you have RSA key pair. You also have some text data. So public key and text data are visible to everyone. Question is, if you sign the text_data with the private key, is the result considered ...
- 111
0
votes
0
answers
113
views
Hashing and Password Cracking
I was playing a game on cryptography where I encountered this problem:
Hashed Value of password: 24 109 76 35 22 94 83 25 106 104 73 87 56 38 56 50 10
92 58 84 44 88 24 112 125 121 125 43 122 55 106 ...
- 111
0
votes
0
answers
53
views
Public key cryptography for logins
This is a question sparked purely by curiosity, wanting to understand a little more about cryptography and authentication. Thanks in advance to anybody taking their time to answer.
Instead of salting ...
- 1
2
votes
1
answer
77
views
How does biometric authentication add protection to encryption schemes?
I'm wondering since at least 2 offline password management services,Passkeep and Keepass both use biometric authentication in addition to the master password. You need to possess the physical device ...
0
votes
1
answer
255
views
How strong would be create a password through AES ECB encryption?
Suppose that I want to use a "poor man" password management working as follows:
1. I choose and remember one single master password (for example "78HK+jm?329");
2a. for any bank, ...
- 137
1
vote
0
answers
158
views
Is it safe to use the same password for both VeraCrypt volume and Windows Login?
I encrypted my entire volume with Veracrypt which prompts on start up and asks for a password, great.
Now after every startup is finished or everytime I leave the computer unattended (after a quick ...
- 19
1
vote
0
answers
337
views
Hashed password used for encryption and for user authentication at the same time
As I am fairly new to cryptography, I would like to understand how to, in a simple way, implement a system that would achieve the following: the user would have to setup a password, which would then ...
- 11
1
vote
1
answer
62
views
Is it possible to send a file that cannot be opened or copied by the reciever, but only by a pre made program?
I couldn't think of a better question to ask, but I will explain more here.
I want to be able to send a Word document to a server that will work with the document data. Are there any good ways to do ...
- 13
1
vote
1
answer
337
views
Why does CMS' PasswordRecipient use a KEK?
When using openssl cms -encrypt -pwri_password, it follows the process described in RFC 3211, which passes the user-provided password into a KDF, but then, rather ...
0
votes
1
answer
271
views
AES and the Feistel Structure Used Together?
In Dual Watermarking in Tele-radiology using DWT for Data Authentication and Security, the authors wrote:
The encryption process uses the Feistel structure
consisting multiple rounds for processing ...
- 11
7
votes
3
answers
3k
views
Password hash contained '\x00' in middle, resulting in ValueError from bcrypt.hashpw
I have some code that accepts a password in string format, and hash it with SHA3-512 before passing it to bcrypt for hashing. However, by some coincidence, I found a test case that produces a hash ...
- 173
1
vote
1
answer
228
views
Am I using these key derivation functions correctly?
I am a bit confused about key derivation functions. I am trying to use the argon2 KDF from the passlib python module to do the ...
- 233
1
vote
0
answers
81
views
How to encrypt a text file in a portable manner based solely on a password?
I used to use openssl aes-256-cbc, but the problem I have with this is when I try to decrypt in a different version of the distro it fails, as if it depends also on some internal key or something, ...
- 201
0
votes
1
answer
255
views
Making a secure file sharing scheme usable
I am trying to realize a secure file sharing scheme based on asymmetric crypto. Users will access this via browser.
In short, it works like this:
Users register and set their username and password. ...
1
vote
1
answer
454
views
Best practise for encryption in a password manager
I'm trying to make a password manager for Windows installed computers, and after researching the best ways to encrypt the passwords in the database (I'm new to cryptography) I think I've come up with ...
- 11
6
votes
2
answers
2k
views
How are recovery keys possible if something is encrypted using a password?
I thought that encryption works as follows - it is about changing the thing we want to secure using an algorithm and using the password to mathematically change the secured content so it is unreadable....
- 71
2
votes
1
answer
366
views
Encrypting data with HMAC-SHA1 challenge response as the key
I came across a piece of software that uses the following algorithm to generate a symmetric encryption key to encrypt data.
Generate a non-secret 64 byte random string $M$ (fixed challenge)
Generate ...
- 201
2
votes
1
answer
69
views
End-to-end photo storage
I've been tasked with developing an app that will need to store photos a user takes securely, and I've been struggling to think up a method to do this.
What I was thinking so far is as follows:
When ...
1
vote
1
answer
3k
views
How to choose parameters for Argon2 for a password vault
I'm creating a password vault, and I plan to use Argon2id to derive the master key from the master password. For encryption, I plan to use XChaCha20 with Poly1305.
To be clear: a set of multiple ...
- 115
0
votes
1
answer
261
views
What are some of the alternatives to password based file encryption?
With the ever increasing risk of attackers compromising password based encryption by brute forcing or guessing passwords, are there alternatives to this traditional scheme of deriving encryption keys ...
- 1,000
1
vote
1
answer
68
views
Issue with decrypting self-coded AES
Summary: As a trainee, I got the task to extract encrypted passwords of our external password manager (Zoho Vault) and decrypt them. The documentation regarding how to decrpyt them is...none. I ask ...
- 11
4
votes
0
answers
707
views
For TCG-Opal drives, which password is used to derive KEK?
SEDs use a user password (PIN) to generate KEK by a KDF algorithm. The KEK is then used to encrypt the MEK (where MEK is internally generated in the drive). But TCG-Opal drives have 9 locking-ranges ...
- 65
0
votes
1
answer
108
views
How to provide secure password based encryption with password reset option
I am trying to build website that will encrypt some data for the user using his/her the output of scrypt on it, now the idea is that this schema is not flexible because if the user loose their ...
1
vote
1
answer
85
views
Do all forms of symmetric encryption require multiple pieces of information? (nonce, iv, etc)
I'm attempting to learn encryption and have a very basic grasp of it, but I have questions.
First, I'm looking to use AES.
I want to take text, encrypt it with AES using a variable-length key, and ...
- 113
4
votes
1
answer
198
views
Security limits of password-based encryption
A reasonable way to do password-based encryption is:
put the passphrase¹ and nonce in a well-parametrized memory-hard iterated hash function like Argon2, to derive a key 128-bit or larger.
output the ...
- 138k
1
vote
0
answers
4k
views
Relation between Zoom id,password and join URL [closed]
We all are using zoom application for joining/hosting meetings in this corona virus period. As we create a meeting, a new id, password and a url is generated. Some real examples follow-
Id: ...
- 111
1
vote
1
answer
237
views
Do all PAKE assume that all parties already have a password?
I was looking for a means to perform a key exchange without relying on a PKI. I discovered Password Authenticated Key Exchange (PAKE) and after reading J-PAKE; I have the following questions:
Do PAKE ...
- 445
0
votes
0
answers
81
views
Can a duplicate ssh private key be dangerous?
For convenience I had an id_rsa keypair and duplicated them with a new name. I may or may not use them consistently on different machines. (The reason was to keep an existing id_rsa on a machine I ...
- 1
0
votes
0
answers
373
views
WPA/WPA password algorithm
I would like to understand the mechanism behind wpa/wpa2 algorithm. Is there any script that can put this theory:(Key = PBKDF2(HMAC−SHA1, passphrase, ssid, 4096, 256)) into action to test it ? I made ...
2
votes
1
answer
417
views
In veracrypt when i generate a random keyfile, does the size of the keyfile mean anything?
thanks for looking at my question, i have been getting several different answers to this question so i thought i might ask it here, when i create a random generated keyfile in veracrypt, does the size ...
0
votes
1
answer
166
views
Using encryption as authentication
I am building an app in which I would like to encrypt user data and support offline login.
From this answer about using passwords for encryption:
Best practice is to use a PBKDF to generate a 'key ...
- 103
2
votes
5
answers
511
views
How passwords are fed to key derivation functions?
Suppose I want to encrypt data, send it over the network, and decrypt it on the receiver side.
I know the elegant way to do this is by using a symmetric key to encrypt the data and an asymmetric key ...
- 123
1
vote
1
answer
2k
views
Argon2 or scrypt instead of PBKDF2 with AES
Is using scrypt or argon2 a better key stretching technique with AES compared to PBKDF2 or bcrypt with regards to
a quantum computer brute force attack. The brute force attack I'm referring to is ...
- 111
1
vote
1
answer
148
views
Simple proof of ownership of a password
I want to do a completely serverless p2p chat application on web browsers, so it won't even have a database to store accounts, but I still want to have some kind of identity system on it (an user can ...
- 231
1
vote
1
answer
2k
views
Why use PBKDF2 over SHA-512 to derive AES encryption key? [duplicate]
Suppose I am using user passwords to derive AES-128-CBC encryption key. This key will be used to encrypt some sensitive data for the user so that even the website owner / operator can not decrypt it.
...
- 11