Questions tagged [stream-cipher]
A stream cipher is an encryption algorithm which encrypts arbitrary length plaintext, using a key. Some stream ciphers generate a keystream from only the key, which is then XOR-combined with the plain text, others feed back plaintext or ciphertext into the algorithm to create the keystream.
531
questions
2
votes
1
answer
107
views
Does combining a stream cipher and block cipher produce any vulnerabilities?
In particular, AES-CBC with Blake2b for HMAC combined with xChacha20-Poly1305.
The scheme is to encrypt with xChacha20-poly1305 first, using a key derived from a high entropy password using argon2id ...
- 21
0
votes
0
answers
53
views
Security of the trivium stream cipher
So I've been trying to implement a Non-Deterministic RBG based on randomness polling from non-hardware sources (nothing novel, just a side-project). Since collecting entropy and further conditioning ...
4
votes
1
answer
115
views
How is the Full-State Keyed duplex useful?
In the Full-State Keyed duplex (sponge construction AEAD), plaintext is absorbed into the entire state of the sponge permutation but only a portion of the output can be used else the scheme breaks (...
- 169
5
votes
1
answer
122
views
Cryptanalysis of the GOC
The GOC (Générateur d'Octets Chiffrants, Ciphering Byte Generator) is a PseudoRandom Generator that was used during the late 20th century for content encryption in pre-internet Videotex terminals, ...
- 138k
1
vote
0
answers
66
views
Is this transposition cipher unbreakable?
Given a password as a seed for a Psuedo Random number generator and Fisher Yates Algorithm to shuffle bytes of a string to random places like Hello World to ...
- 19
3
votes
3
answers
282
views
How big of a threat are *diffusion model* based AIs to cryptographic systems?
The diffusion model, which is used by products like Midjourney and Dall-E, trains AI systems to de-noise (remove added randomness) from data to infer what the original de-noised data is. That would ...
- 785
4
votes
2
answers
119
views
Is there a standard for LFSRs to test against for use in a stream cipher?
I am trying to implement a stream cipher that uses an LFSR PRNG. I have found resources online that give good primitive polynomials, but I am struggling to find resources with the initial states as ...
- 91
3
votes
2
answers
687
views
Encrypting arbitrary large files in AEAD chunks - how to protect against chunk reordering?
I would like to encrypt big files using an authenticated cipher. I am convinced to use approach where file is divided into smaller manageable chunks that fit easily in memory (e.g. 1-10MB size) which ...
- 133
1
vote
1
answer
78
views
What is the name of this kind of cipher? (algorithm and description provided)
I have a cipher algorithm that doesn't seem to be one of the "well known" ones I could find. I expect someone has already come up with this and I just don't know the name. Hoping one of you ...
- 113
1
vote
1
answer
109
views
How does the plausible deniability used by TrueCrypt work mathematically?
I have been unable to find any mathematical explanations on how TrueCrypt's plausible deniability encryption works, when using TC containers.
Would someone be able to provide a mathematical ...
- 139
5
votes
1
answer
167
views
Cryptographically obfuscating IP addresses while preserving locality
In an online community, you sometimes have to ban certain IP addresses or even entire IP ranges due to abuse. You may hire moderators to help you with this, but you might not trust them enough to show ...
- 53
2
votes
1
answer
318
views
Deriving secret keys vs generating and encrypting them
Suppose one has a password manager, based on symmetric cryptography, that requires a master passphrase to be unlocked. Argon2 is used for deriving a secret key from the master passphrase.
I need ...
- 123
0
votes
0
answers
72
views
Is my domain separation in stream cipher and MAC accepted?
I would like to implement domain separation in encryption/decryption along with MAC.
The encryption algorithms consists of XChaCha20,XSalsa20,SM4 From China and MAC algorithms consist of HMAC-SHA512 ...
- 125
1
vote
1
answer
150
views
Age: stream cipher with public key cryptography?
I have some rudimentary cryptography knowledge but am by no means an expert.
I generally understand stream ciphers, such as such as ChaCha20-Poly1305, to be symmetric. I am wondering how age (https://...
1
vote
1
answer
91
views
Size of nonlinear filter sequence to recover LFSR feedback polynomial
Let's suppose that there is a filter generator which based on $n$-size LFSR.
Denote a feedback polynomial as $g(x_1, x_2, \dots, x_n)$ and nonlinear filter function as $f(x_1, x_2, \dots, x_n)$.
Let $...
- 11
6
votes
1
answer
233
views
A modern rotor machine, could it be any safe?
I wonder if a rotor machine similar to enigma can be considered secure by today's standards under four conditions:
A rotor machine which consists of 50 rotors picked out of a set of 100.
A rotor ...
0
votes
1
answer
158
views
How many bits of encryption are enforced in WEP (wired equivalent protocol)
I'm currently taking a computer security module in University and as part of a problem have been asked:
My thought for the question is that no it does not provide 64 bits of security strength. This ...
- 77
2
votes
1
answer
84
views
Cascading Streams From the Same Cipher
Does encrypting plaintext multiple times with the same stream cipher but independent keys increase security? If each key is n-bits, and the cascade uses m-streams, could this be considered mn-bit ...
- 23
4
votes
6
answers
2k
views
why XOR is recommended/Used in every paper I read for encryption and decryption stream cipher?
Stream ciphers use a deceptively simple mechanism: you combine the plaintext data, bit by bit, with “key” bits, using the exclusive or operation.
Why can't I use other opeartions such as NAND, AND, ...
8
votes
1
answer
184
views
AES vs. SHA2 in key-stream generation
A KDF in Counter Mode (e.g., see NIST SP 800-108r1, Section 4.1, similar to HKDF) produces the output as what AES-CTR would do if one replaces AES with SHA2 (or, to be exact, with HMAC).
However, NIST,...
- 129
1
vote
2
answers
82
views
How fast does revealing parity bits leak information?
I've got a scheme where I XOR a secret key value with a public (but random) value, XOR together all the bits of the result, and publish that bit (0 or 1), which is the parity of the result of the XOR. ...
- 111
8
votes
2
answers
3k
views
Is Trivium still secure?
What is the best known attack on the stream cipher Trivium?
And is there is any good reason to not use it?
By googling the good key words, I've found this paper, but I'm not enough expert to judge the ...
- 2,565
-1
votes
1
answer
96
views
Attack on cipher that adds modulo FF output of two LFSRs (LFSR-12 and LFSR-19)
LFSR-12 with poly $x^7+x^2+1$ and LFSR-19 with poly $x^{11}+x^5+1$ are used to produce
8 bit of output each, output is then added together modulo FF
(LFSR-12+LFSR19)mod FF
I know first 8 bytes (-> ...
- 1
2
votes
0
answers
51
views
1st round attack on rc4
I'm trying to implement the 1st round attack on RC4 stream cipher according to Attacks on the RC4 stream cipher. For now I am interested in section 4.2 Attack on other key bytes. It works really fine ...
- 21
3
votes
1
answer
142
views
Is SHAKE hash function seekable when using it as a stream cipher?
I searched a lot for this information in search engines as well as taking a look in the SHAKE reference implementation.
If I decide to use SHAKE as a stream cipher, can I access a specific part of the ...
- 877
0
votes
1
answer
114
views
Various attacks on cipher-images & tools, especially stream-cipher?
What kind of attack of image encryption that exist out there, especially if the cipherimage was created using secure stream-cipher like Salsa20 (256 key) or ChaCha20 (256 key)?
From https://cr.yp.to/...
- 87
0
votes
1
answer
58
views
Stream Ciphers clarification
I am confused about stream ciphers a little so I just wanted to clarify. We have a key that's lets say 2 bits. I have a message that's 8 bits. I used a pseudorandom generator that would add 6 bits to ...
0
votes
1
answer
94
views
Secure symmetric cryptography for low memory/CPU systems
I am looking for symmetric cryptography algorithms that can be implemented on chips with very few resources (about 256K RAM and 16MHz CPU).
An algorithm that works perfectly in this environment is RC4,...
1
vote
0
answers
116
views
Physical meaning of Negligible and Non-Negligible Functions
I've been itching my head over this for a while despite going through the queries related to the topic. Can someone explain me negligible and non-negligible function in a concise way?
As of my naive ...
2
votes
1
answer
192
views
Streams Ciphers - Linear feedback shift register logic behind design
I’m just seeking a better understanding as to the logic behind design of the A5/1 cipher’s keystream generator. Why are the registers degree chosen in such a fashion (19,22 and 23 bits long ...
-2
votes
1
answer
61
views
Where can I find test vector of dragon and grain128?
I don’t know how to find.
Like this picture shows.
- 1
3
votes
3
answers
4k
views
Is there a security risk to use AES-CBC as stream cipher?
I am building a chat application where I want to encrypt each character while they are typing. I would require a stream cipher for that.
I am planning to use AES-CBC mode with HMAC. Are there any ...
- 257
1
vote
2
answers
61
views
Linear complexity of real and complex sequences
In cryptography output sequences of stream ciphers are binary valued (or more generally finite field valued). However mathematically sequences over real and complex variables can also be generated by ...
- 141
1
vote
1
answer
412
views
Common applications and simple implementations of stream ciphers
I am learning about stream ciphers, which apparently are unpopular. I just want to have a better idea of some basic algorithms that are in use or were in use till recently.
I checked:
the OTP: ...
Mah Neh
4
votes
0
answers
143
views
Why Block Ciphers
I fail to understand what block ciphers can do that stream ciphers cannot.
Also aren't they construct able from one another.
prg(stream cipher) -> prf -> prp(block cipher)
Any practical example ...
- 41
0
votes
1
answer
212
views
What is the lightest cipher that provides AES like security?
The lightest, or fastest cipher, that is well known and quite secure like AES. Is ChaCha20 a good option? Are there any better alternatives that are faster but still as secure?
- 25
1
vote
0
answers
88
views
No decryption algorithm for Hummingbird-2?
I stumbled upon hummingbird-2 encryption algorithm when I was looking for a lightweight encryption module that can be used in resorce-restrained environments like Network-on-Chips.
A problem I faced ...
- 21
2
votes
1
answer
3k
views
XChaCha20 vs AES 128 security and speed
Is XChaCha20 with 256 bit key and 192 bit nonce more secure than 128 bit key 128 bit key nonce AES, due to using larger key/nonce sizes? Isn't it supposed to be faster due to being a stream cipher? (...
- 25
2
votes
1
answer
122
views
Sponge Duplex authenticated encryption with nonce reuse or no nonce
With a Sponge permutation in a Duplex construction for authenticated encryption.
illustration example: ascon; actual interest if relevant: keccak
Suppose there is no associated data and there is no ...
- 33
3
votes
2
answers
379
views
Skipping first outputs of the stream cipher
I remember reading somewhere that sometimes in some stream ciphers it is necessary to skip the first values they produce. I can't find any information on this right now.
But it seems to make sense. ...
- 1,211
1
vote
1
answer
208
views
How to crack sha256 used as streamcipher with known or guessable block
Using SHA-256 as a stream cipher appears to bear cryptographic weaknesses, however, I am not quite sure how to implement them in decryption.
Assume that I have an encryption function using 64-byte ...
- 13
0
votes
0
answers
245
views
Attack against stream cipher (LFSR with ASCII)
I'm reading Understanding Cryptography by Christof Paar and Jan Pelzl. In chapter 2 (Stream Ciphers) there's a question that goes like this:
Assume we have a stream cipher whose period is quite short....
- 123
0
votes
0
answers
54
views
What does it mean to break non-invertible stream cipher?
Let's consider for simplicity Middle-Square Weyl Sequence RNG:
https://arxiv.org/pdf/1704.00358.pdf
We can choose there parameter for independent stream generation, we can call it key. Let's consider ...
- 1,211
3
votes
1
answer
156
views
How do different types of ciphers relate to each other?
I understand that there are symmetric and asymmetric (public-key) cyphers. The first have the same key used for encryption and decryption, while the second use a public key for encryption and a ...
- 131
2
votes
1
answer
318
views
What is an output symbol?
I'm reading Understanding Cryptography by Christof Paar and Jan Pelzl. In chapter 2 (Stream Ciphers). There is a section talking about "Bulding Key Streams from PRNGs".
They assume a PRNG ...
- 123
6
votes
1
answer
513
views
Can you use SHAKE256_XOF with XOR to make a stream cipher?
SHAKE256_XOF is an extendable output function based on SHA3-512. SHAKE256_XOF can be used to create an infinite length bit string with 256-bits of security. For example:
...
- 175
1
vote
1
answer
350
views
What would be the benefit of using a Stream Cipher which achieves encryption performance of 0.01 cpb using 1 CPU thread?
If such throughput could be achieved what would the benefits for a data center or IoT devices in terms of power saving. Also I was wondering if such speed was possible to be realized by a cipher, ...
0
votes
0
answers
47
views
How are keys shared safely for block / stream encryption?
I've picked up a grad level computer security class. I read a brief overview on block and stream encryption. I understand and have used PGP in the past and it make since to share your public key. ...
- 1
-1
votes
1
answer
838
views
TRIVIUM Stream cipher how it works
Hello I am quite new in cryptography so I found Trivium stream cipher can anyone explain in basic language how Trivium cipher works
0
votes
1
answer
170
views
Is there a Stream Cipher, with the ability of key reusing and what would be the advantages and applications of this kind of stream cipher?
In the case of a OTP (One Time Pad), if we encrypt two different images with the same key, then two encrypted images will be generated. Then if these two encrypted images are mixed with bitwise xor ⊕, ...