Questions tagged [symmetric]

Symmetric cryptosystems assume two communicating entities share a pre-established secret key.

Filter by
Sorted by
Tagged with
3
votes
0answers
60 views

Key strength comparison: symmetric key vs RSA/DH key

I came across different reputable sources quoting different equivalent symmetric key strengths for RSA/DH keys. This NIST paper (page 67) states the following offer corresponding security strenghts (...
2
votes
0answers
33 views

Looking for a way to enlarge a message so that any modification to the “enlarged” message makes recovering the original message impossible

Let's say we have a message m of small size. I am looking for a system $S$ so that $S(m)$ is arbitrarily large, we can easily compute the inverse $I(S(m)) = m$, and any modification to $S(m)$ makes it ...
0
votes
0answers
81 views

Block cipher modes used in real life

There is a number of block cipher modes, including ECB, CBC, CFB, OFB, CTR and others. After reading "Serious Cryptography. A Practical Introduction to Modern Encryption" by Jean-Philippe ...
2
votes
1answer
47 views

Is ShiftRows(SubtBytes(x)) = SubtBytes(ShiftRows(x)) the same for the same entry : in AES

Is ShiftRows(SubtBytes(x)) = SubtBytes(ShiftRows(x)) the same for the same entry : in AES It seems like these two are equal, can someone explain in theoretically?
0
votes
0answers
27 views

Symmetric algorithm effective key length

If we have a symmetric algorithm with key length $m$ bit, and we do a 5 time encryption with it. How much will it be its effective key length.
1
vote
0answers
28 views

Server distributing/sharing a symmetric key to one or more clients via an established secure connection?

I have a server and a client device that share two separate data channels that each need to have authentication and encryption protections. When a connection is made over data channel 1, it is secured ...
0
votes
4answers
333 views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

We have ciphers that handle small amounts of entropy, such as a 256 bit key for AES; and we have one time pads for enciphering 1:1 entropy, such as a 1GB key for a 1GB file if you could ever harvest ...
0
votes
1answer
50 views

Can i XOR an array of bytes with an equal length key securely

If i have say 64 bytes, can i XOR those bytes with another 64 random bytes, and have two new arrays, where both are needed to reconstruct the first? Intuetively i need some symmetric encryption like ...
28
votes
2answers
28k views

Why is asymmetric cryptography bad for huge data?

I've been told that asymmetric cryptography requires that the message to be encrypted be smaller than its key length. Why is this? I know about hybrid encryption, which uses symmetric encryption to ...
0
votes
0answers
31 views

Encrypt encryted message vs DS

In digital signature The encrypted message is signed by the sender private key and verify using sender public key. The encrypted message is encrypted with another public private key pair which the ...
3
votes
1answer
59 views

Number of keystreams generated in Kreyvium for a single key/IV pair

Kreyvium employs 128-bit key and 128-bit IV. By a single initialization procedure using a key/IV pair, how many keystreams can be generated?
3
votes
1answer
157 views

How does the key agreement process take place in Virgil E3Kit SDK for end to end encryption?

I'm using Virgil E3Kit SDK to implement end-to-end encryption in my App. Their E3Kit SDK is very effective and not too hard to understand, but I still don't understand how does the key agreement ...
2
votes
1answer
361 views

Can I use the secret part of a asymmetric encryption keypair as a symmetric encryption key?

Background I'm working on a framework for crypto-based authentication and authorization that is largely inspired by the way Keybase's Teams product works. Keybase uses the same process to generate ...
2
votes
1answer
65 views

RFC 4493 (AES-CMAC) algorithm with 256 bit key

I apologize for the newbie question. If I were to use a 256-bit key and AES256 (assuming I had the function instead of AES128, the length of the for loops in the functions xor_128, leftshift_bit, ...
0
votes
0answers
23 views

Are there any known problems performing a One-time pad with 2 keys stored separately - AKA 2 part Symmetric key exchange over TLS

If this is something that already has a name, please tell me to look at that, but I have not been able to find one yet. I am considering this process for storing some data securely. I want to ...
0
votes
0answers
36 views

Is the password based key exchange secure even if the public key is known to adversary?

I am assuming the answer for part 1 to be a "NO" as the adversary knows the public key he can get the password by offline attack IN part 2 : the answer is "yes" as the public key is freshly generated ...
0
votes
1answer
75 views

Proving equivalency of two security definitions of symmetric encryption schemes

how to prove definition 3.8 and 3.9 are equivalence ? picture is from book an introduction to modern cryptography (2nd edition) by j. katz and y. lindell pdf and https://repo.zenk-security.com/...
4
votes
2answers
205 views

What makes AES look like an ideal cipher?

There are 2128! permutations on 128-bit inputs. AES supports a maximum key length of 256 bits, therefore offers at most 2256 permutations. The total number of 128-bit permutations is much larger than ...
0
votes
0answers
29 views

Using Diffie Hellman with a shared secret

For a crypto course I need to realize a small software project where a client and a server want to communicate over a unsecured network. They both have the same secret. So I bascially have to secure ...
0
votes
0answers
58 views

Use Pohlig-Hellman to encrypt large files

I have an application that needs to combine two cascaded (symmetric) encryption keys using the Pohlig-Hellman cipher. For example: The system needs two keys for encryption $c = E_a(E_b(x))$ while ...
2
votes
2answers
86 views

Weakness in a CBC-like XOR cipher

A simple symmetric encryption algorithm can be written as follows: Input message M and 64 bit key $K$ Divide M into 64 bit size blocks $B_1...B_n$ Get first block $B_1$ and perform bit-wise $\oplus$ ...
0
votes
1answer
76 views

Which algorithm is the simplest reversible fixed-size length-preserving symmetric “cryptographic” with low probability of collision?

I am not a mathematician/cryptographer, so I could not take much advantage of this other question, and it seems (?) to have more requirements than me (SAC). I say simple, because I need it to be have ...
0
votes
1answer
57 views

Randomly initialised global counter used to encrypt the kth message with IV = IV + k mod 2^n

The use of an increasing IV is not secure for a block cipher. That is, using a random IV for the first message then IV + 1 for the second , IV + 2 for the 3rd etc. How can I construct an attack to ...
2
votes
0answers
878 views

Does encrypting the key with itself make it easier to crack the ciphertext? [duplicate]

As the title states; Is there any risk from encrypting the key with itself? EG. $C = AES(K=K, M=K)$ I'd assume not; after all, how does having the key for a safe inside the safe make it easier to ...
0
votes
1answer
23 views

How to measure brute force speed of a computer for a give cipher with given number of keys for second for a given key space

As I understood brute force attack is measured in number of keys which in turns give time required based on speed of computer It is quite interesting find out how effective an arbitrary computer is ...
0
votes
1answer
90 views

What happens if the first input block is identical to the key in DES?

In Data Encryption Standard (DES), M is the input message and K is the key of 64 bits size. M is divided into n 64 sized blocks (B1,B2,B3...Bn).
1
vote
1answer
92 views

Why isn't data encrypted with mutiple ciphers?

Why isn't data encrypted with multiple uncompromised (so far) ciphers? Feel free to answer for a single private key for both and separate private keys. For example, encrypting data with TwoFish and ...
39
votes
2answers
18k views

Why do we use encrypt-decrypt-encrypt (EDE) in 3DES, rather than encrypting three times?

I'm wondering why we use encrypt-decrypt-encrypt (EDE) sequence in 3DES (also known as DES-EDE, TDES or TDEA) with three keys instead of three times encryption (EEE) with three different keys?
2
votes
2answers
372 views

Is there a symmetric cipher that is explicitly designed to be slow?

I am trying to find a symmetric cipher that is explicitly designed to be slow. I realize that this is generally not desirable, but I'd like many cycles and lots of electronic action. I could modify ...
2
votes
2answers
56 views

Concrete Example of AND Gate Using Garbled Circuit

Most of the resources online like the wiki presents the beautiful idea of Garbled circuit in a rather unnecessarily abstract manner. This is the screenshot of Wiki's protocol: What would be an ...
2
votes
3answers
99 views

Why can a symmetric encryption algorithm be considered a pseudo-random number generation algorithm?

I have a question from my teacher: "Why can a symmetric encryption algorithm be considered a pseudo-random number generation algorithm? Can anyone explain it to me? And sorry if my english is not ...
1
vote
2answers
116 views

Symmetric versus asymmetric self encryption

I can encrypt my files with a symmetric encryption algorithm like AES, or with an asymmetric encryption algorithm like RSA or ECC (I encrypt my files with my own public key). No communication is ...
2
votes
1answer
244 views

Explaining Chaotic Cryptography

I will venture myself into studying chaotic cryptography. However, I find it hard to explain what chaotic cryptography entails to those that have some knowledge of cryptography. Neither can I explain ...
1
vote
1answer
60 views

Encrypt symmetric session key with asymmetric or symmetric master key?

Every day, I must backup my server's files, encrypt the backup, and upload it to untrusted cloud storage (dropbox, s3, etc.) I've spent time on security.stackexchange where I discovered the typical ...
1
vote
1answer
57 views

Testing speed of symmetric vs asymmetric encryption and decryption using gpg

I'm aware that symmetric is faster than asymmetric. I want to test this, but my (obviously incorrect) tests show the reverse. Symmetric test: ...
1
vote
1answer
88 views

Encrypting multiple small messages with a single reused symmetric key

What is a good way of doing this? Practical and Secure. This is for a browser environment. For example, let's say there are a few 100 independent messages of about 100 characters each that you want ...
3
votes
1answer
5k views

How Secure is gpg Command Using Symmetric AES-256 From Being Cracked

How secure is any data encrypted using the following command: gpg -o *encrypted_output_file_name* --symmetric --cipher-algo AES256 *file_to_be_encrypted* Can ...
0
votes
1answer
60 views

Security of key bits under indistinguishability for randomized encryption

My question is about symmetric randomized encryption. Let c=E(k,m,r) be a randomized block encryption function where r denotes a random input chosen for each message block m. k and c denote the ...
2
votes
1answer
99 views

Which is the best algorithm for large scale file encryption other than AES?

I've been looking for a fast, powerful and robust algorithm for encrypting large files with authentication . I would like to implement the algorithm on my own without using third party software. I've ...
2
votes
1answer
52 views

Encryption with 2 symmetric keys and decryption with one key

Here is my use case: I need to keep encrypted data in Hadoop. The data is encrypted with symmetric key that is being changed every half a year. When data is retrieved it should be decrypted. Lets ...
6
votes
2answers
880 views

Does ChaCha20/Salsa have the same bit strength as AES for identical key sizes?

Does ChaCha20/Salsa have the same bit strength as AES for identical key sizes? In other words, does ChaCha20 with a 128-bit key theoretically require 2^128 attempts to brute force, as with AES-128? ...
0
votes
1answer
72 views

Can a message and one time pad each encrypted with separate ciphers be weaker than the stronger of either cipher?

Assume you have: A truly random one time pad, $P$ A plain text message, $M$ Two symmetric ciphers, $C_S$ and $C_W$, where $C_S$ is always more secure than $C_W$ Assume the keys have already been ...
8
votes
4answers
25k views

How is the key shared in symmetric key cryptography?

Symmetric key cryptography is an encryption system in which the sender and receiver of a message share a single, common key that is used to encrypt and decrypt the message. Is the key public or it is ...
1
vote
1answer
81 views

Research Question (Part 2): new symmetric key cryptosystem

A few weeks ago I asked about a new symmetric cryptosystem discovered as consequence of some new mathematics work (link here). As per suggestion of commenters, I spoke with a cryptography professor, a ...
0
votes
0answers
27 views

Estimating the probability of success of a Turing-Welchman attack on an enigma machine as a function of the length of the crib (known plaintext)?

Could anyone please tell me how to to Estimate the probability of success of a Turing-Welchman attack as a function of the length of a crib (known plaintext)?? for example we have the : plain text=...
4
votes
3answers
378 views

Role of session identifier in Otway-Rees protocol

According to Wikipedia, Otway-Ress protocol is as follow: The protocol can be specified as follows in security protocol notation, where Alice is authenticating herself to Bob using a server $S$ ($M$...
1
vote
0answers
50 views

Comparison of end-to-end encryption and TLS

I am writing a comparison paper about security of electronic communication and I want to compare end-to-end encryption and TLS by giving two examples such as Whatsapp and Facebook Messenger. However, ...
0
votes
0answers
63 views

Another cut-and-paste attack on CBC mode

I am trying to see specific cases of attacks in the CBC mode, in particular, I am investigating some attacks such as Example of a cut-and-paste attack on CBC. Here I have posted something similar and ...
1
vote
1answer
44 views

Are the signcryption and the authenticated encryption same?

The signcryption and the authenticated encryption are both the combine of encryption and authentication with three natural composition (i.e., EtS, StE, E&S). I am not sure that if they are the ...
3
votes
2answers
95 views

Is the encryption more secure if we apply Pohlig-Hellman cipher twice with different keys but with the same modulus?

To encrypt a message $M$, we compute $C=M^k \bmod p$ and to decrypt a Cipher-text we compute $M=C^{k^{−1} \bmod (p−1)} \bmod p$ But if we use Pohlig Hellman twice like $C_1=M^k \bmod p$, and then $...

1
2 3 4 5
13