Questions tagged [symmetric]

Symmetric cryptosystems assume two communicating entities share a pre-established secret key.

Filter by
Sorted by
Tagged with
0
votes
0answers
1 view

Are “non-mathematical” encryption algorithms comparably secure against brute force key recovery?

I recently learned about a desktop encryption application called ALKEMI, which does not use mathematical encryption according to the website: The encryption Alkemi uses was written by me starting ...
7
votes
1answer
3k views

AES: Why is it a good practice to use only the first 16 bytes of a hash for encryption?

I'd like to encrypt Text with AES/CTR and a password defined by the user in java. I already checked the internet (and stackoverflow) for answers. The most used version is to hash the user password ...
3
votes
1answer
117 views

Does anyone sell a proprietary symmetric encryption alogirthm?

I know that the majority of people use standardized encryption ciphers such as AES-256, and for good reason. But what I want to know is if anyone has come across a company or organization that is ...
1
vote
1answer
55 views

Reversible Decryption in Symmetric Key Algorithms

I am currently learning the Internal Working of Symmetric Key Algorithms, like DES, AES, BlowFish, IDEA just to name a few. These are all quite complex Encryption alogrithms, which requires a lot of ...
4
votes
0answers
77 views

Single Ciphertext which can decrypt with multiple keys

Say we have a public key system where we have 2 users, Alice and Bob each has a public and private key. We also have a publicly available server which stores a message. I want to encrypt this ...
0
votes
0answers
29 views

How to check the strength of a symmetric key cryptographic algorithm (New/I designed) [closed]

Reliability/Strength Test Needed I have designed a symmetric key cryptographic algorithm on my own and developed it.(block cipher)I need to test this algorithm's reliability or how much strong or how ...
0
votes
0answers
30 views

Term for non-ARX symmetric-key cryptographic primitive design strategy

What's the term for describing designing symmetric-key cryptography primitive out of bitwise operations and shifts and rotations? The closest thing I've found is this Keccek team's page calling it ...
3
votes
2answers
99 views

Is lattice-based cryptography relevant in symmetric cryptography?

I've seen that lattice-based cryptography works well with public key cryptography as well as cryptographic hashing algorithms, but does it apply to symmetric key cryptography?
0
votes
4answers
280 views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

We have ciphers that handle small amounts of entropy, such as a 256 bit key for AES; and we have one time pads for enciphering 1:1 entropy, such as a 1GB key for a 1GB file if you could ever harvest ...
1
vote
1answer
43 views

how are variable key sizes produced?

I am current learning the internal working of several Symmetric key Cryptographic algorithms, and came across DES and AES. DES takes in input a 64 bit key and AES-128 takes in input a 128 bit key ...
1
vote
2answers
122 views

Reed Solomon secret sharing and as a one-time symmetric key?

Shamir's Secret Sharing is just a special case of Reed-Solomon where only one coefficient is used to store the secret instead of the entire polynomial. Sarwate however, suggests that the latter can ...
0
votes
0answers
67 views

AES encryption question

If we consider the generation of keys as $$\begin{aligned} K_0 &= E_K(IV); \\ K_{i+1} &= E_{K_i}(A) \end{aligned}$$ Where A is a block of zeroes, and the ciphertext blocks are computed as ...
3
votes
1answer
103 views

How does the key agreement process take place in Virgil E3Kit SDK for end to end encryption?

I'm using Virgil E3Kit SDK to implement end-to-end encryption in my App. Their E3Kit SDK is very effective and not too hard to understand, but I still don't understand how does the key agreement ...
0
votes
1answer
96 views

Best practices when encrypting a file with three different ciphers [closed]

I have some files that contain important information, so I want to encrypt them by the most secure encryption method possible. I've read countless StackExchange answers on similar questions and some ...
2
votes
1answer
79 views

In GnuPG, what's the difference between --s2k-cipher-algo and --cipher-algo? [duplicate]

I want to change some encryption options while using GnuPG to encrypt a file symmetrically. 1) However, for choosing the cipher algorithm, GnuPG has two commands and I don't know which one to use. ...
15
votes
4answers
7k views

Why does the recommended key size between symmetric and asymmetric encryption differ greatly?

In various articles it is mentioned that for secure communications, the recommended key sizes are 128-bit key size for symmetric encryption (which makes it $2^{128}$ possible keys?) and 2048-bit key ...
5
votes
2answers
144 views

Does ChaCha20/Salsa have the same Bit Strength as AES for identical key sizes?

i.e. does ChaCha20 with a 128bit key, require 2^128 attempts to brute force, as with AES-128, theoretically? Ps. notwithstanding that ChaCha is a stream cipher.
2
votes
1answer
76 views

Symmetric property of DDT of inverse function

Given a bijective function $F: \mathbb{F}_2^n \rightarrow \mathbb{F}_2^n$. The entry of the Difference Distribution Table (DDT) at row $\alpha$ and column $\beta$ is defined as $$DDT_{F}(\alpha,\...
8
votes
3answers
612 views

Are there any symmetric cryptosystems based on computational complexity assumptions?

Are there any symmetric cryptosystems which are provably secure in the sense that there exists a reduction from their security to the hardness of some underlying hard problem such as integer ...
5
votes
3answers
611 views

Are there any quantum-resistant symmetric encryption schemes?

It seems that quite a few currently available encryption schemes will possibly be broken by quantum computing. Are there any symmetric encryption schemes that will remain unbroken (either because of ...
0
votes
4answers
852 views

Can I encrypt data with multiple keys and decrypt with one? [closed]

Can I encrypt data with multiple keys and decrypt with one? To be clear, I am not saying encrypt a file, decrypt it, then encrypt it again with a different key. I want to encrypt it, then encrypt it ...
41
votes
6answers
9k views

How can we reason about the cryptographic capabilities of code-breaking agencies like the NSA or GCHQ?

I have read in Applied Cryptography that the NSA is the largest hardware buyer and the largest mathematician employer in the world. How can we reason about the symmetric ciphers cryptanalysis ...
2
votes
1answer
191 views

Compression in Symmetric Encryption?

When using symmetric encryption is it important to compress the data first? I think that compression will make data look "more random" and therefore be more difficult to crack, but I am not sure if ...
3
votes
2answers
685 views

Symmetric Encryption in the P=NP world [duplicate]

I expected to find answers along the lines of quantum-computing insight into attacking AES; however, answers on this question aren't applicable because "Quantum computers give a quadratic speedup on a ...
4
votes
2answers
121 views

Is there a maximum amount of data which can be encrypted using a symmetric (AES256) key?

I am working on an application where we will be encrypting billions of small (< 2,000 bytes) records. Combined, we are facing many TB of data. Each record will be encrypted independently, using a ...
1
vote
1answer
251 views

Unforgeable CPA-secure private-key encryption scheme that is not CCA-secure

This is exercise with 4.26 in Katz and Lindell's introduction to cryptography 2nd ed. The question is: Show a CPA-secure private-key encryption scheme that is unforgeable but is not CCA-secure. ...
1
vote
1answer
1k views

How Secure is gpg Command Using Symmetric AES-256 From Being Cracked

How secure is any data encrypted using the following command: gpg -o *encrypted_output_file_name* --symmetric --cipher-algo AES256 *file_to_be_encrypted* Can ...
1
vote
1answer
40 views

Key rotation (or other measures) for PASETO v2 “local”

I was looking at using PASETO's v2 "local" encryption (XChaCha20-Poly1305) to implement short-lived tokens to share claims between microservices via an untrusted client. PASETO's documentation is ...
2
votes
1answer
70 views

How to symmetrically encrypt 64bit values?

I'm curious about an algorithm that would be good for the following scenario: 32-bit "plaintext" input, taken from a counter 32 or 64-bit "ciphertext" output It should be possible to decrypt the ...
1
vote
1answer
51 views

Generate $4\times 4$ Sboxes with a given branch number

Say, I want to generate a lot of $4\times4$ Sboxes with linear (or differential) branch numbre of $3$. One idea is to take all the $302$ affine classes, expand each of those classes and check if any ...
0
votes
0answers
36 views

Symmetric Key Encryption with the key a seed

Would it be feasible to give two parties a seed to generate random numbers? So that when they want to send data to each other they send the correction on the random number generated? The random ...
0
votes
1answer
35 views

Randomly initialised global counter used to encrypt the kth message with IV = IV + k mod 2^n

The use of an increasing IV is not secure for a block cipher. That is, using a random IV for the first message then IV + 1 for the second , IV + 2 for the 3rd etc. How can I construct an attack to ...
2
votes
2answers
208 views

Is it possible to determine the symmetric encryption method used by output size?

I'm attempting to identify the method of encryption for a black-box symmetric encryptor that produces blocks of output that are 4 bytes in length (e.g. small inputs fit in 16 bytes, then 20 bytes and ...
3
votes
1answer
98 views

Zero-knowledge proof with only a ciphertext

Suppose there is a plaintext p, which is encrypted with a symmetric cipher using a key k, resulting in a ciphertext c. Bob knows both c and k, but Alice knows only c. Is there any protocol by which ...
4
votes
1answer
245 views

SIMON Cryptanalysis

I'm reading Cryptanalysis of the SIMON Family of Block Ciphers. In Section 3.1, it says: For SIMON, consider an n-bit input difference $\alpha= x\oplus x'$ to $F$ of Hamming weight one. As the ...
3
votes
1answer
73 views

What does it mean : “Canonical representative of Sbox is 0123468A5BCF79DE”? and How can we calculate this representative for Sbox?

In paper :Cryptographic Analysis of All 4 × 4-Bit S-Boxes Saarinen has classified $4 \times 4$ S-Boxes and defined Canonical representative for each class of S-Boxes. What does "Canonical ...
9
votes
1answer
225 views

CAESAR finalists: Lightweight case (Ascon vs ACORN)

The Ascon cipher has been selected as the first choice in lightweight case and ACORN as the second. However according to Face-off between the CAESAR Lightweight Finalists: ACORN vs. Ascon paper, the ...
1
vote
1answer
73 views

What is the inverse function of the finite field GF($2^3$) and GF($2^4$)?

I am currently reading a paper Cryptanalysis of a Theorem Decomposing the Only Known Solution to the Big APN Problem. In this paper, they mention that they used $I$ which is the inverse of the finite ...
11
votes
2answers
1k views

KCV and compatibility with block cipher modes of operation

There has been lately a question on KCV (key check value), value provided by many CRYPTOKI (PKCS#11) implementations. I don't particularly like KCV, but I decided to ask about proper use of KCV. ...
2
votes
1answer
61 views

What does $x^{1/e}$ mean in cryptography in this open butterfly structure?

I am currently reading a research paper that introduces this thing called a butterfly structure. I am confused about the structure of the open butterfly in this paper which has the equation $H^{\...
7
votes
4answers
9k views

Is using the same IV in AES similar to not using an IV in the first place?

So if I understand how an IV works with AES, I'm supposed to generate a different IV for every message because using only a key, I will get the same encryption if the message was encrypted twice (...
0
votes
0answers
47 views

How can a node establish pairwise shared key with other nodes using its own polynomial share together with other's public values?

A server has a symmetric bivariate polynomial $ F(x, y) = \sum_{{i,j}=0}^{t-1}a_{i,j}x^iy^j$ $\in GF(p)[X, Y] $ of degree $t-1$. For simpliciy, $ F(x, y) = a_{0,0}+a_{1,0} x+a_{0,1}y+ a_{1,1}xy$ mod ...
3
votes
1answer
340 views

Is there a symmetric-key algorithm which we can use for creating a signature?

I know that in the asymmetric-key algorithm the RSA signature exists but what about the symmetrical ones?
1
vote
1answer
77 views

Find encryption algorithm knowing input, output and secret

Today on my PC I found some old backups; they contain also some pictures I encrypted years ago with a smartphone running Windows Mobile but I don't remember the application I used to cipher them. I'm ...
1
vote
1answer
76 views

OAEP security with variable length hash function

I'm implementing a hobby cryptosystem for fun and to increase my knowledge on the subject, and I was wondering if the OAEP construct was still sufficient as an all-or-nothing-transform if variable ...
10
votes
0answers
223 views

What was the BassOmatic cipher, and what made it so weak?

According to Wikipedia, this homebrew cipher was originally used in PGP, before Phil Zimmermann replaced it with IDEA. Supposedly, insecurities in the algorithm were pointed out to him, leading to ...
3
votes
2answers
824 views

Insecure private-key encryption

I am learning about crytography and the differences between the public and private keys encryption examples and I was wondering if it is possible to have a private key encryption scheme that is ...
1
vote
1answer
79 views

Is symmetric encryption with a key containing the userId passes as authentication?

The scenario: There is a web application where ownership check is time expensive so during the development all users were able to access all other user's objects (let's say apples) by changing the ...
3
votes
1answer
79 views

Definition of symmetric cipher and definition of asymmetric cipher

So I'm currently taking a cryptography class right now and my professor has told the class that she can't even define symmetric cipher for us without getting into asymmetric ciphers and the textbook ...
2
votes
2answers
92 views

How does an S-box introduce confusion

I'm trying to find the logic for introducing the S-box, but having trouble understanding why. In a simple cipher, e.g. c = pt xor key I understand that I can ...