Questions tagged [stream-cipher]

A stream cipher is an encryption algorithm which encrypts arbitrary length plaintext, using a key. Some stream ciphers generate a keystream from only the key, which is then XOR-combined with the plain text, others feed back plaintext or ciphertext into the algorithm to create the keystream.

Filter by
Sorted by
Tagged with
2 votes
1 answer
107 views

Does combining a stream cipher and block cipher produce any vulnerabilities?

In particular, AES-CBC with Blake2b for HMAC combined with xChacha20-Poly1305. The scheme is to encrypt with xChacha20-poly1305 first, using a key derived from a high entropy password using argon2id ...
bismofunyuns's user avatar
0 votes
0 answers
53 views

Security of the trivium stream cipher

So I've been trying to implement a Non-Deterministic RBG based on randomness polling from non-hardware sources (nothing novel, just a side-project). Since collecting entropy and further conditioning ...
vibhav950's user avatar
4 votes
1 answer
115 views

How is the Full-State Keyed duplex useful?

In the Full-State Keyed duplex (sponge construction AEAD), plaintext is absorbed into the entire state of the sponge permutation but only a portion of the output can be used else the scheme breaks (...
LightTunnelEnd's user avatar
5 votes
1 answer
122 views

Cryptanalysis of the GOC

The GOC (Générateur d'Octets Chiffrants, Ciphering Byte Generator) is a PseudoRandom Generator that was used during the late 20th century for content encryption in pre-internet Videotex terminals, ...
fgrieu's user avatar
  • 138k
1 vote
0 answers
66 views

Is this transposition cipher unbreakable?

Given a password as a seed for a Psuedo Random number generator and Fisher Yates Algorithm to shuffle bytes of a string to random places like Hello World to ...
Sprax's user avatar
  • 19
3 votes
3 answers
282 views

How big of a threat are *diffusion model* based AIs to cryptographic systems?

The diffusion model, which is used by products like Midjourney and Dall-E, trains AI systems to de-noise (remove added randomness) from data to infer what the original de-noised data is. That would ...
aiootp's user avatar
  • 785
4 votes
2 answers
119 views

Is there a standard for LFSRs to test against for use in a stream cipher?

I am trying to implement a stream cipher that uses an LFSR PRNG. I have found resources online that give good primitive polynomials, but I am struggling to find resources with the initial states as ...
Lachlan's user avatar
  • 91
3 votes
2 answers
687 views

Encrypting arbitrary large files in AEAD chunks - how to protect against chunk reordering?

I would like to encrypt big files using an authenticated cipher. I am convinced to use approach where file is divided into smaller manageable chunks that fit easily in memory (e.g. 1-10MB size) which ...
Tom Raganowicz's user avatar
1 vote
1 answer
78 views

What is the name of this kind of cipher? (algorithm and description provided)

I have a cipher algorithm that doesn't seem to be one of the "well known" ones I could find. I expect someone has already come up with this and I just don't know the name. Hoping one of you ...
Iain Ballard's user avatar
1 vote
1 answer
109 views

How does the plausible deniability used by TrueCrypt work mathematically?

I have been unable to find any mathematical explanations on how TrueCrypt's plausible deniability encryption works, when using TC containers. Would someone be able to provide a mathematical ...
securityauditor's user avatar
5 votes
1 answer
167 views

Cryptographically obfuscating IP addresses while preserving locality

In an online community, you sometimes have to ban certain IP addresses or even entire IP ranges due to abuse. You may hire moderators to help you with this, but you might not trust them enough to show ...
Isopod's user avatar
  • 53
2 votes
1 answer
318 views

Deriving secret keys vs generating and encrypting them

Suppose one has a password manager, based on symmetric cryptography, that requires a master passphrase to be unlocked. Argon2 is used for deriving a secret key from the master passphrase. I need ...
user2373145's user avatar
0 votes
0 answers
72 views

Is my domain separation in stream cipher and MAC accepted?

I would like to implement domain separation in encryption/decryption along with MAC. The encryption algorithms consists of XChaCha20,XSalsa20,SM4 From China and MAC algorithms consist of HMAC-SHA512 ...
Hern's user avatar
  • 125
1 vote
1 answer
150 views

Age: stream cipher with public key cryptography?

I have some rudimentary cryptography knowledge but am by no means an expert. I generally understand stream ciphers, such as such as ChaCha20-Poly1305, to be symmetric. I am wondering how age (https://...
incisor_supervisor's user avatar
1 vote
1 answer
91 views

Size of nonlinear filter sequence to recover LFSR feedback polynomial

Let's suppose that there is a filter generator which based on $n$-size LFSR. Denote a feedback polynomial as $g(x_1, x_2, \dots, x_n)$ and nonlinear filter function as $f(x_1, x_2, \dots, x_n)$. Let $...
Grigoriy's user avatar
6 votes
1 answer
233 views

A modern rotor machine, could it be any safe?

I wonder if a rotor machine similar to enigma can be considered secure by today's standards under four conditions: A rotor machine which consists of 50 rotors picked out of a set of 100. A rotor ...
Princeofmillerovo's user avatar
0 votes
1 answer
158 views

How many bits of encryption are enforced in WEP (wired equivalent protocol)

I'm currently taking a computer security module in University and as part of a problem have been asked: My thought for the question is that no it does not provide 64 bits of security strength. This ...
hasin's user avatar
  • 77
2 votes
1 answer
84 views

Cascading Streams From the Same Cipher

Does encrypting plaintext multiple times with the same stream cipher but independent keys increase security? If each key is n-bits, and the cascade uses m-streams, could this be considered mn-bit ...
felix256's user avatar
4 votes
6 answers
2k views

why XOR is recommended/Used in every paper I read for encryption and decryption stream cipher?

Stream ciphers use a deceptively simple mechanism: you combine the plaintext data, bit by bit, with “key” bits, using the exclusive or operation. Why can't I use other opeartions such as NAND, AND, ...
Bhargav - Retarded Skills's user avatar
8 votes
1 answer
184 views

AES vs. SHA2 in key-stream generation

A KDF in Counter Mode (e.g., see NIST SP 800-108r1, Section 4.1, similar to HKDF) produces the output as what AES-CTR would do if one replaces AES with SHA2 (or, to be exact, with HMAC). However, NIST,...
uk-ny's user avatar
  • 129
1 vote
2 answers
82 views

How fast does revealing parity bits leak information?

I've got a scheme where I XOR a secret key value with a public (but random) value, XOR together all the bits of the result, and publish that bit (0 or 1), which is the parity of the result of the XOR. ...
interfect's user avatar
  • 111
8 votes
2 answers
3k views

Is Trivium still secure?

What is the best known attack on the stream cipher Trivium? And is there is any good reason to not use it? By googling the good key words, I've found this paper, but I'm not enough expert to judge the ...
Ievgeni's user avatar
  • 2,565
-1 votes
1 answer
96 views

Attack on cipher that adds modulo FF output of two LFSRs (LFSR-12 and LFSR-19)

LFSR-12 with poly $x^7+x^2+1$ and LFSR-19 with poly $x^{11}+x^5+1$ are used to produce 8 bit of output each, output is then added together modulo FF (LFSR-12+LFSR19)mod FF I know first 8 bytes (-> ...
Mike's user avatar
  • 1
2 votes
0 answers
51 views

1st round attack on rc4

I'm trying to implement the 1st round attack on RC4 stream cipher according to Attacks on the RC4 stream cipher. For now I am interested in section 4.2 Attack on other key bytes. It works really fine ...
SarkoxedaF's user avatar
3 votes
1 answer
142 views

Is SHAKE hash function seekable when using it as a stream cipher?

I searched a lot for this information in search engines as well as taking a look in the SHAKE reference implementation. If I decide to use SHAKE as a stream cipher, can I access a specific part of the ...
phantomcraft's user avatar
0 votes
1 answer
114 views

Various attacks on cipher-images & tools, especially stream-cipher?

What kind of attack of image encryption that exist out there, especially if the cipherimage was created using secure stream-cipher like Salsa20 (256 key) or ChaCha20 (256 key)? From https://cr.yp.to/...
akez's user avatar
  • 87
0 votes
1 answer
58 views

Stream Ciphers clarification

I am confused about stream ciphers a little so I just wanted to clarify. We have a key that's lets say 2 bits. I have a message that's 8 bits. I used a pseudorandom generator that would add 6 bits to ...
Abdulahad Ghuman's user avatar
0 votes
1 answer
94 views

Secure symmetric cryptography for low memory/CPU systems

I am looking for symmetric cryptography algorithms that can be implemented on chips with very few resources (about 256K RAM and 16MHz CPU). An algorithm that works perfectly in this environment is RC4,...
Begoña Garcia's user avatar
1 vote
0 answers
116 views

Physical meaning of Negligible and Non-Negligible Functions

I've been itching my head over this for a while despite going through the queries related to the topic. Can someone explain me negligible and non-negligible function in a concise way? As of my naive ...
A typical nerd's user avatar
2 votes
1 answer
192 views

Streams Ciphers - Linear feedback shift register logic behind design

I’m just seeking a better understanding as to the logic behind design of the A5/1 cipher’s keystream generator. Why are the registers degree chosen in such a fashion (19,22 and 23 bits long ...
Julian Fusco-Wright's user avatar
-2 votes
1 answer
61 views

Where can I find test vector of dragon and grain128?

I don’t know how to find. Like this picture shows.
Chuhan's user avatar
  • 1
3 votes
3 answers
4k views

Is there a security risk to use AES-CBC as stream cipher?

I am building a chat application where I want to encrypt each character while they are typing. I would require a stream cipher for that. I am planning to use AES-CBC mode with HMAC. Are there any ...
tarun14110's user avatar
1 vote
2 answers
61 views

Linear complexity of real and complex sequences

In cryptography output sequences of stream ciphers are binary valued (or more generally finite field valued). However mathematically sequences over real and complex variables can also be generated by ...
Viren Sule's user avatar
1 vote
1 answer
412 views

Common applications and simple implementations of stream ciphers

I am learning about stream ciphers, which apparently are unpopular. I just want to have a better idea of some basic algorithms that are in use or were in use till recently. I checked: the OTP: ...
user avatar
4 votes
0 answers
143 views

Why Block Ciphers

I​ fail to understand what block ciphers can do that stream ciphers cannot. Also aren't they construct able from one another. prg(stream cipher) -> prf -> prp(block cipher) Any practical example ...
xzijoq's user avatar
  • 41
0 votes
1 answer
212 views

What is the lightest cipher that provides AES like security?

The lightest, or fastest cipher, that is well known and quite secure like AES. Is ChaCha20 a good option? Are there any better alternatives that are faster but still as secure?
imdoingmath's user avatar
1 vote
0 answers
88 views

No decryption algorithm for Hummingbird-2?

I stumbled upon hummingbird-2 encryption algorithm when I was looking for a lightweight encryption module that can be used in resorce-restrained environments like Network-on-Chips. A problem I faced ...
Key Heon Lee's user avatar
2 votes
1 answer
3k views

XChaCha20 vs AES 128 security and speed

Is XChaCha20 with 256 bit key and 192 bit nonce more secure than 128 bit key 128 bit key nonce AES, due to using larger key/nonce sizes? Isn't it supposed to be faster due to being a stream cipher? (...
imdoingmath's user avatar
2 votes
1 answer
122 views

Sponge Duplex authenticated encryption with nonce reuse or no nonce

With a Sponge permutation in a Duplex construction for authenticated encryption. illustration example: ascon; actual interest if relevant: keccak Suppose there is no associated data and there is no ...
Lauren Fen.'s user avatar
3 votes
2 answers
379 views

Skipping first outputs of the stream cipher

I remember reading somewhere that sometimes in some stream ciphers it is necessary to skip the first values they produce. I can't find any information on this right now. But it seems to make sense. ...
Tom's user avatar
  • 1,211
1 vote
1 answer
208 views

How to crack sha256 used as streamcipher with known or guessable block

Using SHA-256 as a stream cipher appears to bear cryptographic weaknesses, however, I am not quite sure how to implement them in decryption. Assume that I have an encryption function using 64-byte ...
CrazyPhil's user avatar
0 votes
0 answers
245 views

Attack against stream cipher (LFSR with ASCII)

I'm reading Understanding Cryptography by Christof Paar and Jan Pelzl. In chapter 2 (Stream Ciphers) there's a question that goes like this: Assume we have a stream cipher whose period is quite short....
KetDog's user avatar
  • 123
0 votes
0 answers
54 views

What does it mean to break non-invertible stream cipher?

Let's consider for simplicity Middle-Square Weyl Sequence RNG: https://arxiv.org/pdf/1704.00358.pdf We can choose there parameter for independent stream generation, we can call it key. Let's consider ...
Tom's user avatar
  • 1,211
3 votes
1 answer
156 views

How do different types of ciphers relate to each other?

I understand that there are symmetric and asymmetric (public-key) cyphers. The first have the same key used for encryption and decryption, while the second use a public key for encryption and a ...
YozNacks's user avatar
  • 131
2 votes
1 answer
318 views

What is an output symbol?

I'm reading Understanding Cryptography by Christof Paar and Jan Pelzl. In chapter 2 (Stream Ciphers). There is a section talking about "Bulding Key Streams from PRNGs". They assume a PRNG ...
KetDog's user avatar
  • 123
6 votes
1 answer
513 views

Can you use SHAKE256_XOF with XOR to make a stream cipher?

SHAKE256_XOF is an extendable output function based on SHA3-512. SHAKE256_XOF can be used to create an infinite length bit string with 256-bits of security. For example: ...
Brandon's user avatar
  • 175
1 vote
1 answer
350 views

What would be the benefit of using a Stream Cipher which achieves encryption performance of 0.01 cpb using 1 CPU thread?

If such throughput could be achieved what would the benefits for a data center or IoT devices in terms of power saving. Also I was wondering if such speed was possible to be realized by a cipher, ...
Tunnel_Vision's user avatar
0 votes
0 answers
47 views

How are keys shared safely for block / stream encryption?

I've picked up a grad level computer security class. I read a brief overview on block and stream encryption. I understand and have used PGP in the past and it make since to share your public key. ...
josh's user avatar
  • 1
-1 votes
1 answer
838 views

TRIVIUM Stream cipher how it works

Hello I am quite new in cryptography so I found Trivium stream cipher can anyone explain in basic language how Trivium cipher works
Giorgi Chubinidze's user avatar
0 votes
1 answer
170 views

Is there a Stream Cipher, with the ability of key reusing and what would be the advantages and applications of this kind of stream cipher?

In the case of a OTP (One Time Pad), if we encrypt two different images with the same key, then two encrypted images will be generated. Then if these two encrypted images are mixed with bitwise xor ⊕, ...
Tunnel_Vision's user avatar

1
2 3 4 5
11