Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [symmetric]

Symmetric cryptosystems assume two communicating entities share a pre-established secret key.

127 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6 votes
0 answers
309 views

How to make a "zero knowledge" cache/key-value store

I'd like to use a possibly insecure cache for storing expensive-to-calculate sensitive information. My requirements are: If the cache ever gets compromised it should reveal nothing about its ids or ...
Daan Bakker's user avatar
5 votes
0 answers
151 views

Resistance to integral attacks by North Korean block cipher Jipsam1

The cipher is a modification to AES and is described on this website: The only difference between Jipsam1 and AES-256 is the S-box. Whereas in AES the S-box is public and constant, namely $$ \begin{...
forest's user avatar
  • 15.3k
5 votes
0 answers
195 views

Is it possible to enhance white-box cryptography security by homomorphic encryption?

Background: Let's discussed based on published symmetric white-box crypto only, such as Chow's white-box AES. I only know basic concepts/objectives of homomorphic encryption, such as PHE and FHE. ...
TJCLK's user avatar
  • 497
4 votes
0 answers
217 views

Why are matrices so common in symmetric encryption?

Matrices have been used in symmetric ciphers since the Hill Cipher (before?) all the way up to modern ciphers such as Twofish and AES. I understand matrices can be invertible, therefore making them ...
Red Book 1's user avatar
  • 1,025
4 votes
0 answers
243 views

Safely using ciphers that take small key sizes

Is it feasible to use triple encryption for block ciphers with the maximum keysize being the only significant security issue? I mean $C = E_{k_1}(E_{k_2}(E_{k_3}(P)))$ and $P = D_{k_1}(D_{k_2}(D_{k_3}(...
forest's user avatar
  • 15.3k
4 votes
0 answers
147 views

Creating an SPN cipher from ChaCha20 or Salsa20's double round function

Given that ChaCha20's building blocks have been also used to construct a hash function, can the double round function from either ChaCha20 or Salsa20 be used to construct a secure SP-network cipher? ...
Melab's user avatar
  • 3,655
4 votes
0 answers
172 views

Using machine-learning techniques for data-dependent operations in ciphers

From 'Methods of Symmetric Cryptanalysis' by Dmitry Khovratovich, The data-dependent operations are one of the most controversial design concepts. We say that an operation is data-dependent, if it ...
meta_warrior's user avatar
3 votes
0 answers
317 views

Encrypt/Cipher and Decrypt/Decipher a string with a secret

In developing an app I have a simple use case in where I want to encrypt/cipher a string (it could also be a couple of bytes because it's essentially just an IP-Address). On the output I think it ...
fonzane's user avatar
  • 131
3 votes
1 answer
224 views

Key Encryption: Does it need to be Authenticated?

Alice wants to store files $m_i$ on Bob's untrusted cloud storage platform, with the additional restriction that she can only store one master key $k$ herself. She encrypts the files with keys $k_i$ ...
Arya Pourtabatabaie's user avatar
3 votes
0 answers
165 views

Key strength comparison: symmetric key vs RSA/DH key

I came across different reputable sources quoting different equivalent symmetric key strengths for RSA/DH keys. This NIST paper (page 67) states the following offer corresponding security strenghts (...
user avatar
3 votes
0 answers
280 views

Majority encryption algorithm?

Assume that I want to leave an encrypted message to a group of $n$ people in a way that they can only decrypt it if they work together in the following sense: For some fixed $k < n$ every sub-...
Listing's user avatar
  • 131
3 votes
0 answers
684 views

LR-Oracle Experiment in Lindell and Katz

In reference to the LR-Oracle experiment in “Introduction to Modern Cryptography” (2nd edition) by Lindell & Katz, Definition 3.23 states a scheme $\pi = (Gen,Enc_K,Dec_K)$ is CPA secure for ...
Rohit Khera's user avatar
2 votes
0 answers
44 views

Design criteria of block ciphers in quantum setting

Some design criteria of block ciphers are already known for the resistance against known attacks like differential, linear , boomerang, etc. Does there already exist any study of design criteria of ...
Ranit Dutta's user avatar
2 votes
0 answers
103 views

Why KeePassXC is deriving (stretching) the key again before saving changes to the database?

KeePassXC supports Argon2, which is great for security. However, there's a quirk that's been bothering me. Every time I save modifications to the database, it seems to stretch (derive) the key again, ...
Valentin Stoykov's user avatar
2 votes
0 answers
69 views

Is ISAAC+ actually an improvement over ISAAC?

I just tried to implement ISAAC from scratch, using the Jean-Philippe Aumasson paper from 2007 as a reference. This paper gives a definition of the original ISAAC algorithm as well as the improved ...
Guenther Brunthaler's user avatar
2 votes
0 answers
210 views

Exchanging key and input in GGM tree?

I am currently working through the exercises in A Graduate Course in Applied Cryptography by Dan Boneh. I am stuck on exercise 4.16 (page 188 in this PDF) In the GGM tree construction for constructing ...
rahul yadav's user avatar
2 votes
0 answers
37 views

Do symmetric and skew symmetric key schedules have any known weaknesses?

A symmetric key schedule is a key schedule of the form $(k_1,\dots,k_{n-1},k_n,k_{n-1},\dots,k_1)$ or of the form $(k_1,\dots,k_{n-1},k_n,k_n,k_{n-1},\dots,k_1)$. A skew symmetric key schedule is a ...
Joseph Van Name's user avatar
2 votes
0 answers
59 views

Encrypting with one key and decrypting with a related key

Given $n$-bit block cipher $E$ (and its inverse $E^{-1}$), define block cipher $E^\prime_k(m) = E_k(E_{f(k)}^{-1}(m))$ where $k,f(k) \in \{0,1\}^n$ and $\forall k:f(k) \ne k$. Under the ideal block ...
forest's user avatar
  • 15.3k
2 votes
0 answers
205 views

Can we transform LWE symmetric encryption scheme into a commitment scheme?

In the LWE symmetric encryption scheme, a ciphertext encrypting a message $\mu \in \{0,1\}$ under the secret key $\mathbf{s} \in \mathbb{Z}_q^n$ is $(\mathbf{a}, \mathbf{b}=\mathbf{a} \cdot \mathbf{s}+...
maon_mea's user avatar
2 votes
0 answers
39 views

Equivalent conditions for perfect secrecy of a symmetric crypto system

I've been reading about perfect secrecy in crypto systems and I've ran across two definitions which turn out to be equivalent. The first is Shannon secrecy: A crypto system $(\cal K, \cal M$, $\text{...
giorgioh's user avatar
  • 121
2 votes
0 answers
96 views

What would be an O(n) time adversary for this kind of scheme

Suppose we have a block cipher $$E:\{0,1\}^k \text{ x } \{0,1\}^{2k} \rightarrow \{0,1\}^{2n} \quad \text{ with } \quad k,n\geq128$$ K is the key generation algorithm that returns a random k-bit key. ...
DiegoLopez's user avatar
2 votes
0 answers
65 views

is $F_{k_{1}}(m)||F_{k_{2}}(F_{k_{1}}(m))$ always a PRF? when F is a PRF

is $F_{k_{1}}(m)||F_{k_{2}}(F_{k_{1}}(m))$ always a PRF? when F is a PRF As an intuition it seems to me that the answer is "NO" as the two halves of the output depends on each other
Doron Bruder's user avatar
2 votes
0 answers
315 views

Is the following derived MAC where the output is XOR'ed with the key secure?

Hey I'm wondering if the following scheme is secure or not , I tried reductions and some tries to prove that it not must be secure but I feel completely stuck . More details: It's just any reduction ...
Doron Bruder's user avatar
2 votes
0 answers
33 views

Is the polynomial system representation of a symmetric cipher overdetermined?

Is the representation of the polynomial system of a symmetric cipher overdetermined?
juaninf's user avatar
  • 2,711
2 votes
0 answers
23 views

Verifying affine spaces in Xoodoo component

I am reading "The design of Xoodoo and Xoofff". On page 13 there is a collorary related to the component $\chi$ [Algorithm 1, 1]. Corollary 1. For fixed (difference or mask) $a$, the ...
juaninf's user avatar
  • 2,711
2 votes
0 answers
59 views

How is the 'Algebraic Degree' calculated in the paper about analysing the white-box AES(Chow et al. 2002) by exploiting internal collisions?

This paper proposed a new attack on the initial white-box AES implementation of Chow et al. In order to determine the good solution, we use the particular structure of the function $S_{0}$. $S^{-1} \...
leet's user avatar
  • 21
2 votes
0 answers
88 views

DES decryption of the homomorphic encryption ciphertext

I implemented an application using partial homomorphic encryption for outsourced computations. To get an efficient bandwidth, I am thinking to apply (DES) symmetric algorithm to encrypt the message ...
Maka's user avatar
  • 21
2 votes
0 answers
42 views

Looking for a way to enlarge a message so that any modification to the "enlarged" message makes recovering the original message impossible

Let's say we have a message m of small size. I am looking for a system $S$ so that $S(m)$ is arbitrarily large, we can easily compute the inverse $I(S(m)) = m$, and any modification to $S(m)$ makes it ...
MATHIEU SERAPHIM's user avatar
2 votes
1 answer
555 views

Proving equivalency of two security definitions of symmetric encryption schemes

how to prove definition 3.8 and 3.9 are equivalence ? picture is from book an introduction to modern cryptography (2nd edition) by j. katz and y. lindell pdf and https://repo.zenk-security.com/...
mike's user avatar
  • 41
2 votes
0 answers
228 views

Extracting RC4 and 3DES keys from system memory

I have read papers [1], [2] that have presented techniques on extracting symmetric encryption keys from memory during the process of encryption. There are tools [3] that can extract AES keys from ...
learnerX's user avatar
  • 687
2 votes
0 answers
121 views

What is the intuition behind the strength of unstructured symmetric cryptography?

Consider a single round of a cryptographic permutation, what is so special about it that lacking some bits of information that either get mixed into it as a subkey or omitted at the end (sponge ...
user avatar
2 votes
0 answers
38 views

Symmetric encryption with partial knowledge of key

While reading Laurent Bussard's thesis, Section 4.5.1, p91 (p119 of the pdf) I wondered about the following paragraph (emphasis mine): the prover first picks a random symmetric key $k \in_R \{0, 1\}...
Sebastian's user avatar
  • 461
2 votes
0 answers
167 views

Sharing salt for deterministic symmetric key derivation

I have a requirement to generate and share unique symmetric keys for a large numbers of small data objects. In many cases the storage and retrieval of the key for each object will be a significant ...
Neil's user avatar
  • 121
2 votes
0 answers
601 views

The right way to encrypt sensitive data with an user password

I am developing something like 1Password and I want to be sure that method that I use is secure. Main idea of the app is storing user passwords, and is protected with a global master password. Main ...
user avatar
2 votes
0 answers
411 views

Bit slice format of 4x4 s-boxes?

I have studied bit-sliced implementation in SERPENT block cipher and I need to use this technique to implement some 4x4 s-boxes. I couldn't find any procedure to obtain bit-sliced format in any paper ...
Vahid's user avatar
  • 39
2 votes
0 answers
274 views

Rijndael - is there some difference in resistance between counter in generator input and in IV?

I am thinking about Rijndael implementation in order to store tokens (cannot be hashed) - one token for one user. And finally I get stuck with key/IV generation problem :( The questions are: 1) Is ...
KEMBL's user avatar
  • 121
2 votes
0 answers
296 views

Asymmetric vs symmetric encryption

I am a beginner learning about encryption and I would like to ask a few questions, hoping this is the right place to ask, so please bear with me. We have Alice and multiple clones of Bob. Only Alice ...
Ulrik's user avatar
  • 121
2 votes
0 answers
179 views

Common pitfalls of session key activation?

Assume that initiator $I$ and responder $R$ of a key agreement protocol have agreed on new symmetric session keys $K'_{auth}$ and $K'_{enc}$, e.g. by way of Diffie-Hellman and key derivation, possibly ...
AHalvar's user avatar
  • 143
2 votes
1 answer
163 views

Provably secure cryptography in blockchains

Do you know a blockchain that does not use at all cryptographic primitives standardized by USA or other countries? It is strange to me that the security of many cryptocurrencies is based on ciphers, ...
Dimitri Koshelev's user avatar
1 vote
0 answers
40 views

How Helpful is NXP's LRP Encryption Protocol vs AES for short keys?

NXP has a custom (I think) encryption protocol known as "Leakage-Resistant Primitive", or LRP, built on top of AES. I think the goal of this is to basically "expand" the length of ...
johnnyb's user avatar
  • 111
1 vote
0 answers
189 views

Mathematical approach to symmetric cryptography

I'm no mathematician but when thinking about block ciphers such as AES I find it much easier to think of them as a mathematical function $f$ (rather than an 'algorithm') such that $c=f(m,k)$ with $c$ ...
Mr. B's user avatar
  • 129
1 vote
0 answers
42 views

Are semantic security and indistinguishability equivalent for symmetric key cryptosystems?

I've seen a lot written about how, in the context of public key cryptosystems, these definitions are equivalent. Is the same true of symmetric key cryptosystems? If so, what are the precise statements ...
joshlf's user avatar
  • 267
1 vote
0 answers
179 views

In Symmetric encryption where Alice and Bob message each other, how can both decrypt the same data?

I first posted this question on StackOverflow but they told me it belongs here instead: https://stackoverflow.com/questions/77856486/in-symmetric-encryption-where-alice-and-bob-message-each-other-how-...
sudoExclamationExclamation's user avatar
1 vote
0 answers
82 views

Can the requirement to increase rounds with key size be bypassed?

When taking AES for example, the number of rounds increases as the key size increases. This is done in order to adequately diffuse key bits into the state of the cipher. Suppose you replace the AES ...
LightTunnelEnd's user avatar
1 vote
0 answers
58 views

Linux Kernel CryptoAPI key exchange and key derivation

I have a custom network and I want to implement a symmetric key exchange and key derivation mechanism with ECDH. I know that I need to use KPP API and ECDH helper functions, but I can't find any code ...
Ham's user avatar
  • 11
1 vote
0 answers
88 views

AES-GCM for sensitive database field - good solution?

I have been researching the best encryption to use in a .NET application for managing a sensitive database field (column). This encryption is on top of e.g. AWS at-rest encryption applied to the whole ...
MFL's user avatar
  • 11
1 vote
0 answers
97 views

What is the most secure hybrid cipher suite(Library) possible today?

What combination of public key cryptography (DH) and symmetric key cryptography is currently available that is (subjectively) as secure as possible over other ciphers (AES,curve448) when security is ...
nitchan's user avatar
  • 137
1 vote
0 answers
311 views

Difference between the eavesdropping and the CPA experiment in the case of multiple messages

while reading Introduction to modern cryptography by Katz and Lindell, I came across these two experiments: For me, they look like it's the same thing. Can you please explain me the difference? ...
Souphiane Bensalim's user avatar
1 vote
0 answers
46 views

How LastPass decrypts database on web browser?

According to video from Dr. Pound, password managers (LastPass in particular) holds encrypted image of your data on their servers and then with master password you authenticate to get encrypted image ...
unalignedmemoryaccess's user avatar
1 vote
0 answers
87 views

is HMAC required if i am using AES-CFB and using Digital signatures for Authentication

I researched online and found AES-GCM and ChaCha20Poly1305 aren't post quantum secure. So I am planning to use symmetric AES256 cipher in CFB mode do I need to implement MAC using HMAC like HMAC-...
ANISH M 18CS006's user avatar