Questions tagged [stream-cipher]

A stream cipher is an encryption algorithm which encrypts arbitrary length plaintext, using a key. Some stream ciphers generate a keystream from only the key, which is then XOR-combined with the plain text, others feed back plaintext or ciphertext into the algorithm to create the keystream.

Filter by
Sorted by
Tagged with
1
vote
0answers
38 views

How to increase Poly1305 performance?

I was analysing the Chacha20 algorithm and the Poly1305 MAC generation from RFC 7539. It seems that the Chacha20 is quite faster compared to AES on CPUs without hardware support like AES-NI. But ...
0
votes
0answers
28 views

Text cipher option that can decrypt the same ciphertext to two DIFFERENT and DESIRED outputs given DIFFERENT keys (and/or alphabet)

I have a pen pal that I discuss with. In our latest discussion it was proposed to write a short message that is ciphered and have the other one find what it is, given some clues. I would like to ask ...
1
vote
1answer
154 views

Is it possible to acquire the next keystream of Salsa20? (If you know part of the keystream)

When you know the Salsa20's keystream, how do you know the next keystream? In other words, can I infer the next keystream when I don't know the Key and IV of Salsa20, but the keystream is ...
6
votes
1answer
448 views

Pseudorandom Generator

In a cryptographic application, two types of (pseudo)random bit streams are needed: a stream $A= a_{1}a_{2}a_{3}\ldots$ in which $\Pr[a_{i}=0]=\Pr[a_{i}=1]= 1/2\ \forall i$ and a stream $B= b_{1}b_{2}...
2
votes
1answer
159 views

Can repeatedly encrypting a message with a secure cipher ever produce the original input like what happens in ROT13?

Lets say we have a message 'm'. We encrypt 'm' using a stream cipher or any other type of cipher with cryptographic security that produces an output equal in length to the length of 'm'. Then if we ...
1
vote
0answers
44 views

Should you pad messages encrypted with stream ciphers?

Should you pad messages encrypted with stream ciphers? The obvious answer seems to be yes, right? It obviously leaks the exact length of the plaintext. Consider a situation where an adversary knows a ...
3
votes
1answer
50 views

Is precomputing AES-CTR key stream secure?

Q0 : Is the precomputed key stream vulnerable to side-channel attacks like a lookup table for exemple ? I don't think it is because a lookup table is accesed very often, that's what makes it non ...
1
vote
1answer
41 views

ChaCha matrix - tests for original implementation not passing due to bad counter encoding?

Hello everyone and already thanks for taking your time to read this! I am currently implementing ChaCha20 (256-bit key) for my bachelor thesis. I know that there are two version of ChaCha out there; ...
3
votes
1answer
77 views

Number of keystreams generated in Kreyvium for a single key/IV pair

Kreyvium employs 128-bit key and 128-bit IV. By a single initialization procedure using a key/IV pair, how many keystreams can be generated?
1
vote
1answer
83 views

ECRYPT Salsa20 Test Vectors Interpretation

I am currently implementing Salsa20 for my bachelor thesis. After having verified all the functions needed for the final encryption function with the given test data in the specification from DJB, I ...
0
votes
1answer
54 views

Encrypting a string of arbitrary size with a big integer

I am currently writing Python script that initiates a secure handshake. I am kind of reinventing the wheel here, so that I can properly learn it. Now, I have Diffie-Hellman mostly working from ...
0
votes
2answers
57 views

Logarithmic brute-force for stream-ciphers

First of all, I want to make sure I understand stream ciphers correctly: I put a plainchar (e.g. byte?) through the stream cipher and receive a cipherchar. Correct? When I now have a pair of ...
1
vote
1answer
106 views

Hash based stream cipher where the input is a constant, key, nonce and counter

This is a question out of curiosity ! A hash function produces an output that is considered computationally infeasible to reverse. Let's consider, for the sake of illustration purposes a tried and ...
0
votes
0answers
35 views

Approach used with XOR cipher in black box scenery

What's the approach used in cryptanalysis to make an decrypter for a simple xor stream cipher in a Black Box scenery with only the output?
0
votes
1answer
112 views

Question about ChaCha20's security

I wonder the Stream Cipher ChaCha20 only changes 96 bits each block, why it can produce 512 bits keystream block, I mean in the concept of a random number generator, the ...
0
votes
1answer
38 views

Can we use a hash-based stream cipher against DPA attacks?

There have been lots of DPA researches against block ciphers. I was wondering if we use a cryptographically secure hash of an incremental counter as a stream cipher, will it withstand DPA attacks? ...
2
votes
0answers
41 views

Linear approximattion of $(x+y) \bmod 2^n$ in FSM of SNOW 2.0 where $x,y$ in $F_{2}^n$

I would like to understand the linear approximation of $(x+y) \bmod 2^n$ by linear masking method in the paper refereed ""Improved Linear Distinguis'hers for SNOW 2.0" by Kaisa Nyberg and Johan Wall´...
0
votes
0answers
82 views

Most used stream ciphers?

I am writing my Bachelor thesis on topic "Current state of stream ciphers". So my questions is: Which stream ciphers are used the most. So far I have A5 family, RC4, E0 (Bluetooth), Snow 3G and ZUC (...
1
vote
0answers
39 views

Can Trivium ciphertext be decrypted by an adversary if the key is known, but the IV is not?

Suppose that the adversary is able to recover the key of Trivium cipher. But the associated IV is unknown to him. Will he be able to decrypt the ciphertexts without any complexity?
7
votes
1answer
749 views

Which cipher is used in the new 5G network?

I think that the stream ciphers SNOW 3G and AES are used in 4G (LTE). But I can't find which cipher is used in 5G networks and how encryption is done. Is there any official documentation?
0
votes
0answers
34 views

Best method for storing cryptographic secret key and generation of IV in Trivium?

How the secret key for Trivium cipher is stored and managed in an embedded system (IoT sensor node)? How the IV is generated in a Trivium? How to justify the fact that storing a fixed value (for ...
5
votes
1answer
408 views

What is the significance of IV in stream ciphers like Trivium?

In Trivium cipher, an 80-bit key and 80-bit IV (initialization vector) are used initially to set up the initial state. I would like to know, Role of IV in stream cipher? Can we make IV a secret ...
1
vote
2answers
139 views

Attack on LFSR key stream generator

Alright this is a question I found on one of my books: Given is a stream cipher which uses a single LFSR as key stream generator. The LFSR has a degree of 256. How many plaintext/ciphertext bit ...
0
votes
0answers
131 views

Is XChacha20 - Poly1305 Quantum resistant?

This is a question just out of curiosity, as I am a newbie to Post Quantum Cryptography. I have read several articles where they emphasize that current standardised symmetric encryption algorithms (...
2
votes
1answer
111 views

Which is the best algorithm for large scale file encryption other than AES?

I've been looking for a fast, powerful and robust algorithm for encrypting large files with authentication . I would like to implement the algorithm on my own without using third party software. I've ...
1
vote
1answer
47 views

Storing values under different keys (e.g. during key rotation)

If you are encrypting some secrets (database passwords, access tokens, etc). When it comes to key rotation, you'll need to store those encrypted values twice, for a short period of time (under the ...
1
vote
1answer
58 views

Name for a Ceasar Cipher that uses random offsets?

In a traditional Ceasar Cipher, you pick a specific offset such as "plus three" so that to encrypt each character of a message you count three letters up from the input and to decrypt you count three ...
1
vote
1answer
93 views

How to calculate period of stream cipher with multiple LFSR and NLFSR

I am interested in knowing how to calculate period of a stream cipher with more than one FSR (linear as well as non linear). I know for a single FSR, period can be calculated with farmula q^L-1 where ...
1
vote
0answers
39 views

Are there any state of the art crypanalysis tools for stream cipher

I am new to cryptanalysis and interested in knowing cryptanalysis tools (black boxing or white boxing) for (not any specific) stream ciphers in general sense. Scenario: I am given an assignment to ...
5
votes
1answer
92 views

Use large key size for RC4 to avoid RC4 bias

I saw a question on StackOverflow where RC4 was initialized by a 1024 bit key (with 2048 the maximum key size, if I'm not mistaken). Will such a large key size possibly solve any of the bias of the ...
1
vote
0answers
27 views

Can we use the same frame counter in A5/2

Let we have three encoded messages with length $3*456$ bits in A5/2 encryption. Can we use the same frame counter in the encryption process or we must use different? (E.g. this because in the below ...
0
votes
0answers
33 views

How to prove IND-CPA on a cipher [duplicate]

I came across an exercise "custom" block cipher which looks like a counter mode implementation, but it is not exactly it. I want to check if this scheme is IND-CPA secure. Here is a picture of the ...
5
votes
2answers
191 views

Is the ChaCha20 block function reversible using known plaintext?

I've been recently implementing the chacha20 stream cipher with Poly1305. As the core operations which make up the Quarter Round of chacha20 (ARX - Addition Rotation Xor) are indeed reversible, does ...
5
votes
0answers
129 views

Why does chacha20 not use bitwise not?

Right now chacha20 and blake use constants in order to eliminate fixpoints. As far as I know however inserting a bitwise not every $n$ rounds should eliminate this ...
0
votes
1answer
66 views

Is there any security issue if an attacker recovers the key stream generated by a stream cipher?

I've learned that a stream cipher like ChaCha20 generates a key stream that gets XORed with the plaintext to get the ciphertext... If an attacker knows the plaintext, he could just simply XOR that ...
0
votes
1answer
220 views

How does stream cipher works? [closed]

I will be grateful if someone can explain how stream cipher works using Pseudorandom generator(PRG).
0
votes
2answers
153 views
0
votes
1answer
120 views

Recognizing and decrypting custom cipher with known plaintext and ciphertext

I've been trying to reconstruct an encryption algorithm that produces a known ciphertext from a know plaintext. I have done some analysis: the algorithm operates on single bytes a plain text can be ...
1
vote
0answers
47 views

Circular Security - Encrypting the key with the key

I know this isn't the best practice, but what if I took a cheap/fast 128-bit stream cipher (assuming both the key and the stream blocks are 128 bits) and mixed in the plainkey with the plaintext (let'...
1
vote
1answer
61 views

Stream cipher - Many time pad

I understand the concept that when you xor the cipher texts you get the XOR messages cause the keys get XOR-ed and cancel out... This is at least the case when both the messages are of equal lengths. ...
2
votes
1answer
38 views

A5/2 session key derivation

Let talk about Implementation and performance analysis of Barkan, Biham and Keller’s attack on A5/2. In this paper, mentioned that we need to brute force attack on register 4 ($R_4$) to get keystream ...
2
votes
0answers
47 views

Design of SIMD-implemented cipher

Design of efficient of block ciphers needs consideration of many factors such as register size. i found that some ciphers can be SIMD implemented such as TWINE , SM4 , chacha20 ,SPIX ,and others. ...
0
votes
1answer
59 views

Safely store data before moving to air-gapped machine

This is related to an earlier question, Is it possible to use an algorithm to generate an OTP? I have two machines: A, and B. A is connected to the internet and files are uploaded regularly. B is ...
1
vote
1answer
38 views

What happens after sharing the secret key in quantum cryptographic schemes to send the message bits?

As a person working on the physics perspective of quantum communication, I understand the process upto which the quantum key is shared securely. What happens after this process to send message bits? ...
1
vote
1answer
294 views

How can AES-CCM behave as an AEAD stream cipher?

AESCCM- Couter with Cipher Block Chaining Message. As it uses cmac for generation for tag , which is internally aes-cbc (block cipher, need block size, may require padding) And Encryption is done ...
0
votes
0answers
33 views

Meaning of direction in EPS

In EEA (EPS Encryption Algorithm) and EIA (EPS Integrity Algorithm), what exactly does the direction (uplink/downlink) indicate? It's confusing because for both encryption and decryption of a given ...
5
votes
1answer
107 views

Can Trivium be used as a PRF?

The Trivium encryption algorithm has two inputs, key and IV, both of which are 80 bits long. Let's call it Trivium(key, IV) → keystream. My question is whether doing Trivium(key, input) and taking the ...
1
vote
0answers
67 views

Perfect Forward Secrecy Stream Cipher based on Block Cipher

I'm thinking about ways to encrypt an endless stream of data (e.g. a video or audio feed) in a way, where a compromise of the current internal state of the encryption (e.g. a RAM dump) does not ...
2
votes
1answer
87 views

Building Key Streams from PRNGs

I am reading an intro book about cryptography and the author tries to explain why using pseudo random number generators is vulnerable. Given PRNG equation; \begin{align} S_0 &= \text{seed}\\ S_{...
1
vote
1answer
419 views

Understanding LFSR stream ciphers and the content scrambling system

I'm a little confused over how exactly Linear Feedback Shift Registers (LFSR) work, I kind of get it, but not really, can someone help me understand it? I know it XORs bits in a loop against some mask,...

1
2 3 4 5
9