We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [stream-cipher]

A stream cipher is an encryption algorithm which encrypts arbitrary length plaintext, using a key. Some stream ciphers generate a keystream from only the key, which is then XOR-combined with the plain text, others feed back plaintext or ciphertext into the algorithm to create the keystream.

Filter by
Sorted by
Tagged with
0
votes
1answer
47 views

Safely store data before moving to air-gapped machine

This is related to an earlier question, Is it possible to use an algorithm to generate an OTP? I have two machines: A, and B. A is connected to the internet and files are uploaded regularly. B is ...
1
vote
1answer
33 views

What happens after sharing the secret key in quantum cryptographic schemes to send the message bits?

As a person working on the physics perspective of quantum communication, I understand the process upto which the quantum key is shared securely. What happens after this process to send message bits? ...
1
vote
1answer
62 views

How can AES-CCM behave as an AEAD stream cipher?

AESCCM- Couter with Cipher Block Chaining Message. As it uses cmac for generation for tag , which is internally aes-cbc (block cipher, need block size, may require padding) And Encryption is done ...
0
votes
0answers
20 views

Meaning of direction in EPS

In EEA (EPS Encryption Algorithm) and EIA (EPS Integrity Algorithm), what exactly does the direction (uplink/downlink) indicate? It's confusing because for both encryption and decryption of a given ...
5
votes
1answer
80 views

Can Trivium be used as a PRF?

The Trivium encryption algorithm has two inputs, key and IV, both of which are 80 bits long. Let's call it Trivium(key, IV) → keystream. My question is whether doing Trivium(key, input) and taking the ...
1
vote
0answers
40 views

Perfect Forward Secrecy Stream Cipher based on Block Cipher

I'm thinking about ways to encrypt an endless stream of data (e.g. a video or audio feed) in a way, where a compromise of the current internal state of the encryption (e.g. a RAM dump) does not ...
0
votes
0answers
24 views

AES Stream Cipher Mode Key Reuse With Random IV Per Message [duplicate]

Im using AES OFB mode, which is a stream cipher. It will be used to encrypt many seperate small amounts of data in very short amounts of time. If for every separate piece of data encrypted I use a ...
2
votes
1answer
65 views

Building Key Streams from PRNGs

I am reading an intro book about cryptography and the author tries to explain why using pseudo random number generators is vulnerable. Given PRNG equation; \begin{align} S_0 &= \text{seed}\\ S_{...
0
votes
0answers
15 views

Building Key Streams from PRNGs [duplicate]

I am reading an intro book about cryptography and the author tries to explain why using pseudo random number generators is vulnerable. Given PRNG equation; ...
1
vote
1answer
181 views

Understanding LFSR stream ciphers and the content scrambling system

I'm a little confused over how exactly Linear Feedback Shift Registers (LFSR) work, I kind of get it, but not really, can someone help me understand it? I know it XORs bits in a loop against some mask,...
0
votes
0answers
44 views

A5/1 Formula Question's

So before I start I'm learning how this algorithm still works so my first question is for the x,y, and z steps (of getting the keystream I believe). The formula is t = y 20 XOR y 21 for y. There is ...
0
votes
1answer
37 views

Is it possible to find what is the random generated key if I know the plaintext and ciphertext? [closed]

Is it possible to find what is the key with only plaintext and ciphertext? For example, My plaintext is: hi My ciphertext is: 0x1db5
-3
votes
1answer
59 views

Test for true random number generator

For my networks project I have decided to implement a youtube-based secret key generator used in creating a self-synchronizing stream cipher hash function. Basically all the youtube video comments ...
1
vote
0answers
37 views

MULalpha and DIValpha operations in SNOW 3G

I'm not able to appreciate the importance of mul alpha and div alpha operations in feedback polynomial of LFSR in SNOW 3G. What problems or weakness do they help in mitigating and how ?
1
vote
1answer
48 views

What does MULx operation in SNOW 3G correspond to?

According to the spec, MULx operation is defined as - MULx maps 16 bits to 8 bits. Let V and c be 8-bit input values. Then MULx is defined: If the leftmost (i.e. the most significant) bit of V ...
1
vote
2answers
83 views

Confusing terminology about stream ciphers

In their book, Understanding Cryptography, on page 37, Christof Paar and Jan Pelzel write: Definition 2.2.2 One-Time Pad (OTP) A stream cipher for which the key stream s0,s1,s2,... is ...
4
votes
0answers
60 views

Does the bias in RC4 drop asymptotically further in the keystream?

It's well-known that the RC4 keystream has significant biases that become less prominent later in the keystream. The most severe bias is in the second byte, which has a 128-1 bias towards zero. Other ...
1
vote
1answer
33 views

secure “related-key” stream cipher

Consider a stream cipher $E(k)$ which takes a key $k$ to produce a pseudo random keystream. It should have the property that you can easily generate a set of at least 3 different keys $\{k_m, k_0, ...
1
vote
1answer
83 views

collision resistance of a composed hash function

Given a collision-resistant hash function $H(x)$, say SHA256, and I devise another hash function by $H'(x)=\sum^{m}_{1}H(x||i) \mod p$. The summation is defined on finite field of prime order $p$. ...
3
votes
1answer
149 views

Does anyone sell a proprietary symmetric encryption alogirthm?

I know that the majority of people use standardized encryption ciphers such as AES-256, and for good reason. But what I want to know is if anyone has come across a company or organization that is ...
0
votes
1answer
88 views

Why Stream Ciphers can be slower in software than Block Ciphers

I made some tests on virtual environment (Virtual Box) using StrongSwan, a VPN based on IPSec. I had latency results using ping command saying that Chacha20 (stream cipher) had poor performance ...
5
votes
2answers
113 views

Append data to authenticated ciphertext encrypted using a stream cipher

Say we have xSalsa20 authenticated using Poly1305. If $ X $ is the ciphertext, $N$ is the nonce value, and $H$ is the authentication tag such that the final ciphertext is $ N || X || H $, then given ...
0
votes
1answer
163 views

Mixing Cipher Lower Bounds

Let Z be a cipher system consisting of three m-sequence linear feedback shift registers (LFSR) of length 128 bits each which are assumed to be not cryptographically secure and the registers are seeded ...
-1
votes
2answers
432 views

How to find the key of XOR encryption in Java?

I am trying to find the key of an XOR-encrypted string in Java. It is very probable that the key is eight characters long. I have the encrypted string. I do not understand how to go backwards and ...
1
vote
1answer
57 views

Ciphers based on Keywords

I am looking for different ciphers that use a key word (like "hello" or "awesome") to encrypt a given text. I know about the Keyword Cipher already; I'm looking for others.
1
vote
2answers
241 views

What are the implications of XORing ciphertext with plaintext?

I was intrigued by this question: Does adding complexity mean a more secure cipher? And it led me to wonder: What are the implications (if any) of XORing a ciphertext with the original plaintext ...
1
vote
1answer
76 views

Stream cipher — Are all random bit generators suitable for stream cipher?

I learned the stream cipher using LFSR in the book. I wonder whether all random bit generators (i.e. BBS, Rabin generator) are suitable for stream cipher. I search using keywords "stream cipher" and "...
1
vote
1answer
159 views

How resistant are stream ciphers like Salsa20 or ChaCha in a post-quantum world?

What kind of quantum computer would be required, if it is possible to break such ciphers?
1
vote
0answers
58 views

Simple but secure hand cipher for a computerless world [closed]

this is my first time posting here, so please be gentle! As may be obvious, I'm an amateur who knows very little cryptanalysis. The goal I've been playing around trying to make a simple but strong-...
2
votes
3answers
140 views

Can I achieve data authentication with ChaCha20 without MAC?

My case is rather special. I need to send data in small chunks, each under 32bytes. ChaCha20 state is 64 bytes. Since I will be receiving data stream in chunks, id like to verify it on the fly (i.e. ...
2
votes
3answers
309 views

Does ChaCha20 counter actually increment through iterations?

RFC defines: state = constants | key | counter | nonce Suggested on multiple places is to set counter to 0 or 1. It is still ...
2
votes
1answer
74 views

Maximum security strength in bits of ISAAC cipher?

Wikipedia claims key length can be very big in this cipher, so I assume it can offer a million bits of security provided entropy of key is the same? Of course I can SHA-256 hash the key to allow any ...
2
votes
2answers
98 views

Meaning of epsilon in proving a PRG is predictable/ un predictable

I am quite confused, I have been following a course on crypto provided by Dan Boneh, this is the lecture I am confused with - https://www.youtube.com/watch?v=EjWap3szsPk time stamp 8:58 - 11:00 I don'...
2
votes
2answers
105 views

How to produce a binary output sequence using LFSRs but with increased linear complexity?

How to produce a binary output sequence using LFSRs but with increased linear complexity? I have tried searching but i got confused on equation details. So can anyone help me with rather simple ...
1
vote
2answers
191 views

How to know the difference between two ciphertexts without key stream in stream ciphers [duplicate]

If I have two cipher texts lets say $C_1$ and $C_2$ of the same length encrypted through stream cipher technique using the same keystream. Let's say they are: $$C_1: \texttt{96 C6 A1 08 E7 F2 33 3B ...
1
vote
1answer
222 views

E0 encryption algorithm attack vector

E0 is used for encrypting Bluetooth communication, and it is initialised with a key of at most 128 bits. How secure is E0, and what are the E0 encryption attack vectors?
-2
votes
1answer
515 views

How to crack LFSR with known plain text attack?

I'm learning stream ciphers and I'm at LFSR cipher, and I've been trying to solve the question that states if given a 5th degree lfsr with the cipher text ...
0
votes
0answers
41 views

Maximum key stream sequence per key/IV pair in communication protocols

In the paper "LIZARD – A Lightweight Stream Cipher for Power-constrained Devices", one of the design rational of Lizard cipher is key stream size per key/iv pair. A5/1 produces only 228 keystream ...
2
votes
2answers
140 views

Self-synchronizing cipher recovery from dropped bits

This cryptography book says: There are also asynchronous or self-synchronizing stream ciphers, where the previously produced ciphertext bits are used to produce the current keystream bit. This ...
-1
votes
2answers
177 views

Learning about Feistel Cipher

I'm learning about Feistel Ciphers at the moment, but having issues with the formulae, so I can't move on from it. Encryption: $𝐿𝐸_{𝑖+1} = 𝑅𝐸_𝑖$ $𝑅𝐸_{𝑖+1} = 𝐿𝐸_𝑖 \oplus 𝐹( 𝑅𝐸_𝑖 , 𝐾...
0
votes
0answers
20 views

Analyzing RC4 with a reduced state array [duplicate]

RC4 is a stream cipher which uses a 256-element array of 8-bit values. All operations are done modulo 256. Is there any research on modified versions of RC4 using a smaller state array? How small can ...
1
vote
1answer
65 views

How secure is a 4 digit seed?

When I Use a 4 digit random number(e.g. 4468) as seed for a (manual) Stream cipher and straddle it to the length of the plaintext using a lagged fibonnacci generator, can this seed be found by brute ...
1
vote
1answer
57 views

How is overflow handled in word addition steps in Salsa20?

I feel like I'm completely missing something there. The quarter-round proceeds as follows: ...
2
votes
3answers
124 views

Terminology: Is a block cipher in counter mode still considered a block cipher or is it classified as a stream cipher?

I'm confused about what terminology to use. I see people referring to such a cipher-MOO combination using both terms.
0
votes
1answer
52 views

Starting stream cypher, first block (Salsa20)

I'm implementing Salsa20 in Rust for fun. I have the initial state (4x4 32-bit matrix) setup from the key, nonce, and stream position 0. I'm using the Wikipedia Salsa20 article as reference, and I'm ...
-1
votes
2answers
162 views

Are all block and stream ciphers symmetric?

I'm trying to categorize my knowledge. Can I place block ciphers and stream ciphers under symmetric with RSA/DH under asymmetric?
4
votes
2answers
340 views

Why are stream ciphers based on linear-feedback shift registers so popular?

I was conducting research on stream ciphers and LFSRs was a subtopic of my research and I was wondering why are LFSRs so popular?
1
vote
0answers
143 views

berlekamp massey feedback polynomial

I have a couple of polynomials to find. Can anybody guide me with the steps to find the feedback polynomial using berlekamp massey's algorithm. Example: Key fragment: 10100100001001101001011 seed: ...
5
votes
1answer
1k views

Decrypting Ciphertext with partial Key Fragment using LFSR and Berlekamp-Massey

Edit Does the state register (the LFSR) always have to remain with 16 bits (I'm assuming yes). If so, are we shifting the register right by one (lfsr>>1) ...
0
votes
0answers
101 views

Combining stream cipher with block cipher for disk encryption

You take something like chacha20 and use the disk block # to seek it, xor it with the data block and then encrypt it with a block cipher in ECB mode. Would this be secure? Edit: To avoid getting ...