Questions tagged [symmetric]

Symmetric cryptosystems assume two communicating entities share a pre-established secret key.

Filter by
Sorted by
Tagged with
2
votes
2answers
40 views

What does a linear function with huge order mean?

I am reading this paper "Farfalle: parallel permutation-based cryptography", and there are some terms that I do not understand. Page 4 says ratio efficiency vs. safety margin. What does ...
1
vote
1answer
221 views

Proving equivalency of two security definitions of symmetric encryption schemes

how to prove definition 3.8 and 3.9 are equivalence ? picture is from book an introduction to modern cryptography (2nd edition) by j. katz and y. lindell pdf and https://repo.zenk-security.com/...
0
votes
1answer
44 views

AES-128 CBC encryption : ciphertext size seems too large

I am trying to encrypt messages with the AES symmetric algorithm using C language. I am using a key, an Initialization Vector (IV) and a plaintext, all with a length of 16 bytes. I expected as output ...
0
votes
0answers
36 views

Should I encrypt the signature along with the message? [duplicate]

Given that A wants to send a message M to B, I have 2 scenarios as shown: The difference between the 2 is that for case 1, the digital signature is appended to the message before being encrypted ...
0
votes
1answer
54 views

Strategies to address an immutable key in a symmetric cryptosystem

I have a power constrained environment where I do not have enough power to update an encryption key. For this reason, the symmetric key will be programmed before the devices are distributed, and this ...
14
votes
3answers
4k views

Why is the market for cryptographic primitives non-commercialized?

There are not many successful companies in cryptographic primitives market. Certicom holds many patents attached to the ECC. RSA Security probably made some profits from the patent. Are there more ...
0
votes
2answers
132 views

Designing a simple challenge-response symmetric mutual authentication protocol

I am designing a protocol that 2 devices will use to mutually authenticate over an unreliable, unsecure channel. The system must be fast and low-power, so symmetric cryptography is a requirement. I ...
3
votes
2answers
72 views

Using $key^{th}$ multiple of $\pi$ as a one-time pad

With a key $k$ of sufficient length, say 128 bits, is it possible to use $k^{th}$ multiple of $\pi$ as a one-time pad? Please enlighten on the security as well as practical aspects (only if secure of ...
2
votes
2answers
2k views

Some questions about encrypting (AES) a file with password

I'm relatively new to encrypting, and I have some questions. I intend to write a standalone C# program that will write and read an encrypted file with sensitive data using a password entered by the ...
0
votes
0answers
18 views

How useful is proxy if we use a symmetric key?

I am trying to understand the proxy re-encryption scheme. In proxy re-encryption: (1)Alice use AES key to produce the symmetric ciphertext of her message. (2)The proxy encrypt symmetric ciphertext ...
3
votes
1answer
73 views

How exactly to concatenate two differential trails to form a boomerang disguisher in practice?

I've been reading many papers on boomerang/rectangle attacks. The general strategy is to find two trails for a small number of rounds and then concatenate them to form a longer distinguisher. ...
1
vote
0answers
49 views

Implement deterministic authenticated encryption using libsodium

Note: this is my first question on stack exchange, let me know if you miss some details to answer and I will edit the question accordingly Context I'm willing to create a git encryption tool (...
1
vote
1answer
49 views

How to calculate the branch number of a linear mapping?

Is there an efficient algorithm which can be used to determine the branch number of any given linear mapping?
33
votes
1answer
10k views

What is a tweakable block cipher?

Pretty simple question - but I can't seem to find much information about it. What exactly is a tweakable block cipher? How do they differ from traditional block ciphers? What is the 'tweak'? Is it ...
0
votes
0answers
45 views

Enigma Machine rotors math

I have been doing a study about the enigma machine for the past weeks. I managed to get ahold of the formulae used in "Cryptography, Information theory and error-correction" book for the ...
1
vote
1answer
55 views

How do we know a single differential/linear trail dominates the others?

I have read the proof of AES's resistance against differential cryptanalysis. In the proof the authors show that there is no single differential trail with prop ratio higher than $2^{-300}$ over 8 ...
1
vote
1answer
70 views

Is there any standard present to measure strength of a generated key using true random number generator?

I was wondering how to measure the security strength of a generated secret key for the below protocol: "A 128 bit random number is generated by TRNG and the random number will be used as a ...
0
votes
0answers
27 views

Add setup to GPG symmetric

I use GPG symmetric, to encrypt text file. Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions: ...
0
votes
1answer
105 views

Can a message and one time pad each encrypted with separate ciphers be weaker than the stronger of either cipher?

Assume you have: A truly random one time pad, $P$ A plain text message, $M$ Two symmetric ciphers, $C_S$ and $C_W$, where $C_S$ is always more secure than $C_W$ Assume the keys have already been ...
1
vote
1answer
67 views

Encrypting h(k) for defeating partition oracle attacks

Is encrypting $h(k)$ (or even just $k$) and verifying it before checking the MAC enough to defeat partition oracle attacks and thus make the whole scheme robust/committing (without depending on ...
0
votes
5answers
402 views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

We have ciphers that handle small amounts of entropy, such as a 256 bit key for AES; and we have one time pads for enciphering 1:1 entropy, such as a 1GB key for a 1GB file if you could ever harvest ...
0
votes
0answers
28 views

Number of bit operations required for encryption in a Block cipher

I want to find out how many bit operations are performed for encryption in AES-128 with messages size $128$ bits. For public key encryptions such as RSA and ElGamal, I know that number of bit ...
1
vote
2answers
70 views

What symmetric algo does TLS use?

So my understanding of TLS is that it uses asymmetric cryptography such as DH to perform a key exchange, once this has occurred it then used an symmetric algorithm for the data exchange. (Obviously I ...
0
votes
0answers
33 views

nonlinearity and autocorrelation of common s-boxes

I cannot find publications comparing the properties of popular cipher s-boxes. First of all, I am interested in nonlinearity and autocorrelation of s-boxes, which are used in seed, cast-128, camellia ...
0
votes
2answers
50 views

Is there an algorithm that gives a reasonable chance of decoding the entire ciphertext of this encryption scheme?

Suppose Alice and Bob share two $n$-bit shared keys, $k_1$ and $k_2$, and decide to send multiple $n$-bit messages to each other. The encryption scheme they use simply sends $c_i = (k_1 + i k_2) \...
0
votes
1answer
102 views

Symmetric Encryption, meet in the middle attack, effective key length

What is the effective key length of a deterministic encryption scheme, given a meet-in-the-middle attack scenario when you encrypt five times (64 bit keys for each)? . Say the encryption scheme has |...
4
votes
1answer
535 views

How strong is XooDoo vs AES?

What is Gimli, and how does XooDoo compare to symmetric ciphers such as AES or ChaCha? I am looking at this library, called charm. Interesting paper here. I also ...
0
votes
1answer
51 views

Can any message be decrypted using a given ciphertext and an appropriate key?

Does the following proposition hold for any deterministic, symmetric cryptosystem $(\mathcal{M}, \mathcal{C}, \mathcal{K}, Enc, Dec)$? $$\forall C \in \mathcal{C}: |\{M'| \exists K \in \mathcal{K}: ...
11
votes
1answer
375 views

What was the BassOmatic cipher, and what made it so weak?

According to Wikipedia, this homebrew cipher was originally used in PGP, before Phil Zimmermann replaced it with IDEA. Supposedly, insecurities in the algorithm were pointed out to him, leading to ...
1
vote
1answer
53 views

Where is the SIV in AES-GCM-SIV?

This is my understanding of Synthentic IVs You have 2 keys $K_1$ & $K_2$. $F$ is a PRF Instead of choosing a separate IV, you instead generate the IV from the PlainText. $IV = F(K_1, m)$ $c = E(...
1
vote
1answer
46 views

Modular Addition in RC5 is linear or not?

So, far my understanding was Modular addition is non linear function which is mainly used in ARX based ciphers. While I was glancing through RC5 paper (https://link.springer.com/content/pdf/10.1007/3-...
0
votes
1answer
58 views

Brute force strategy

I am a beginner in this field, and I was thinking about brute force strategies to break symmetric key encryption. Let's say we have a block cipher in CTR mode and the key is 56 bits in size. What ...
1
vote
1answer
613 views

Session key Exchange, some doubt

I have to find a solution to this problem: I have a network composed by 1 server and some client. The server has a couple of keys (public and private) and it shares a secret key with each client. My ...
0
votes
0answers
39 views

Question about IND-CCA security

We are given the following securitygame $G^{\text{LOSTNAME}}$: Generate $k \leftarrow \{0,1\}^{\kappa}$ uniformly at random Choose $h \leftarrow \{0,1\}$ uniformly random Create decryption oracle $\...
1
vote
1answer
29 views

Encrypting a broadcast message decryptable by a subset of receivers

I wasn't certain how to title this request/problem, but here goes: I'm A, and I want to send a message that is received by B, C, D. Each receiving entity here is part of some set of domains D1, D2, D3:...
2
votes
1answer
158 views

Could a symmetric encrypted communication with a SHA-512 hash still be manipulated?

I just got back from an exam review and there was a question I remembered that I apparently got wrong. I wonder if someone could help me with this, since it bothers me. The question was something like ...
2
votes
3answers
229 views

Broadcast encryption not using symmetric keys

Is there a common scheme for broadcast encryption that doesn't involve an exchange of a shared key? I'm aware that traditionally a common symmetrical key would be given to all parties and exchanged ...
0
votes
1answer
40 views

Symmetric key as proof of ownership of a session?

I have a question, or rather multiple questions that all relate to the same topic. I am building an application with both a frontend (FE) and a backend (BE). All communication between FE and BE is ...
3
votes
1answer
188 views

How does the key agreement process take place in Virgil E3Kit SDK for end to end encryption?

I'm using Virgil E3Kit SDK to implement end-to-end encryption in my App. Their E3Kit SDK is very effective and not too hard to understand, but I still don't understand how does the key agreement ...
45
votes
7answers
10k views

How can we reason about the cryptographic capabilities of code-breaking agencies like the NSA or GCHQ?

I have read in Applied Cryptography that the NSA is the largest hardware buyer and the largest mathematician employer in the world. How can we reason about the symmetric ciphers cryptanalysis ...
0
votes
1answer
62 views

Symmetric Exchange Key Sharing

Question: Suppose that there are 10000 = 10^4 banks and 10 payment card organisations (PCOs). How many secret keys will be needed if each PCO shares a unique secret key with each bank? How many extra ...
-1
votes
1answer
49 views

Encryption on one AES mode and decrypting on another, where both use HMAC

Let's say there are 2 ciphers, $enc$ and $dec$, where: $enc$ will encrypt the data, and $dec$ will decrypt it. Both $enc$ and $dec$ must be an AES cipher. $enc$ and $dec$ will use the same key $k$ ...
0
votes
0answers
72 views

Mathematical and empirical analysis of AES

Hello everyone and happy new year in advance. I'm doing a work about the analysis of the AES algorithm, and I have some doubts about this. First, I need to do the mathematical analysis of the ...
0
votes
2answers
145 views

Is CTR more secure than CBC?

In cryptography, a block cipher mode of operation is an algorithm that uses a block cipher to provide information security such as confidentiality or authenticity. A block cipher by itself is only ...
0
votes
0answers
60 views

Key storage management of session keys and long term keys

In key management, one of the topics is key storage, I want to know where and how these keys(long-term and short-term) are stored? For example I read that android password apps use KeyStore api to ...
1
vote
1answer
22 views

Encryption in SET protocol

I have a rough idea of what is symmetric and asymmetric encryption, but I can't apply the idea to the SET protocol (Secure Electronic Transaction Specification), so how the symmetric and asymmetric ...
2
votes
0answers
36 views

How is the 'Algebraic Degree' calculated in the paper about analysing the white-box AES(Chow et al. 2002) by exploiting internal collisions?

This paper proposed a new attack on the initial white-box AES implementation of Chow et al. In order to determine the good solution, we use the particular structure of the function $S_{0}$. $S^{-1} \...
0
votes
1answer
83 views

What are the fundamental roots of modern symmetric encryption?

In academic pursuits, we often have people (and their ideas) who are considered fundamental to the subject, such as Bayes and probability. In cryptography, it's obvious to see that the Diffie-Hellman ...
2
votes
1answer
145 views

How to estimate the maximum computational cost bound for Key Derivation Functions (KDFs) before it becomes useless security-wise?

From my understanding of Key Derivation Functions (KDFs), e.g. scrypt, Argon2, etc, we can tune their parameters such that it eventually becomes harder for an attacker to brute force a password-to-key ...
0
votes
0answers
21 views

Zero knowledge proof of symmetric keys and encrypted texts resulting in the same text, if the symmetric keys are encrypted with asymmetric ones

Suppose I have: text T, symmetric keys X, Y encrypted text T with symmetric keys X, Y = TX, TY accordingly asymmetric key Z, used to encrypt X, Y to transmit them to a person. Let the encrypted ...

1
2 3 4 5
14