Questions tagged [symmetric]

Symmetric cryptosystems assume two communicating entities share a pre-established secret key.

Filter by
Sorted by
Tagged with
0
votes
1answer
67 views

Pad ciphertext with arbitrary number of bits

I have a symmetric-key encryption scheme. I think the output from this scheme (MAC + IV + CBC ciphertext) should already be practically indistinguishable from random, but I would like to pad the ...
1
vote
1answer
456 views

AES-encrypted 128-bit null block: lookup table?

Let's say a 1MB file has many many consecutive null-bytes 128-bit blocks. Then, as AES works with blocks, the encrypted file will also have recurrent 128-bit-long patterns of ...
0
votes
1answer
80 views

Increasing rounds in DES, increases or decreases the security?

I was wondering whether in DES, if we used more than 16 rounds, the security of the message was increased or actually decreased? (disregarding the decreased speed ...
0
votes
3answers
2k views

What's the difference between block ciphers and symmetric-key encryption?

Both block ciphers and symmetric-key encryption use a secret key to transform plaintext into ciphertext, and do so in a reversible manner. Are they the same? Or does symmetric-key encryption also ...
3
votes
1answer
252 views

Searchable Symmetric Encryption VS Deterministic encryption?

I am a beginner learning about encryption. The Searchable Symmetric Encryption is better than Deterministic encryption? When I say better I mean smaller leakage.
4
votes
4answers
307 views

Transferring Encrypted One-time pad over the internet

I was working with one-time pad, and as I understand , for one time pad to be 100% secure a key shouldn't be repeated. So assuming Alice and Bob have to exchange messages over the network secured over ...
3
votes
2answers
193 views

Which element produces randomness in symmetric block ciphers encryption

Talking about symmetric encryption, I have 3 elements which I keep trying to puzzle together: IV, encryption mode, and padding. My question really is which of these elements makes the ciphertext be ...
1
vote
2answers
543 views

OTP stream cipher

I am new to cryptography so there is one thing which is bothering me. I hope you kindly help me to understand. Let's imagine an attacker harvest plaintext as well as ciphertext in OTP One Time Pad. I ...
1
vote
3answers
682 views

Is a message digest useful with symmetric encryption to check for integrity?

I have some confusion that concerns the message digest. I know that the message digest is the real message hashed with function and we use it to verify the integrity of the message. I understand the ...
1
vote
2answers
78 views

Property that prevents determining key from ciphertext and plaintext

What is the property (if it is not Forward Secrecy) that prevents (good) symmetrical encryption algorithms from being vulnerable to an attack vector that requires only decrypted data, and the ...
0
votes
1answer
130 views

Whats the most secure way to encrypt a string without the use of a computer? [duplicate]

I want to decrease attack surface by preventing the plaintext string or encryption key from ever being typed or otherwise entered into a computer. Ideally the decryption key would be something that ...
0
votes
1answer
3k views

AES key expansion for 192-bit

In AES-192 key expansion there are 12 rounds and 52 keys. I am not sure why 52 keys are derived since each block consist of 4 rows and 6 columns (192 bit keys). So if the block is 4 x 4 then we ...
-2
votes
2answers
581 views

Java - AES with 20 byte packet

I have 20 bytes of data that I need to encrypt and send to a bluetooth node. The main issue being that the receiving node only accepts 20 byte packets. Further, I cannot send multiple packets, one ...
-2
votes
1answer
878 views

What Is The Weakest Possible Encryption Algorithm [closed]

I've been creating a Capture The Flag site and for one of the challenges I wanted you to have to break an encryption algorithm. Granted I want it to be a weak one, so I want the weakest out there. One ...
3
votes
1answer
304 views

Is this MAC-then-encrypt scheme secure?

I have the following requirements: 64 bits (8 bytes) of data ($D$) that requires confidentiality and integrity; the data itself is a nonce, never need to authenticate/encrypt the same value twice (e....
1
vote
3answers
1k views

Why is Symmetric encryption classed as Private Key?

I am going for my ethical hacking exam soon and I still can't get my head around why symmetric key encryption is classed as "Private/Secret Key encryption" when symmetric encryption uses the same key ...
0
votes
2answers
256 views

Suitable Symmetric Algorithm for Encryption

Please, I would like to encrypt word not more than 5 letters such as (GO, HI, APPLE, EYES) and my key length just (40 bits only), please I am looking for a suitable symmetric algorithm that it can be ...
1
vote
1answer
647 views

Simple secret key encryption with PyNaCl [closed]

I am playing around with PyNaCl to get a bit into cryptography atm. Now I wrote two scripts to encrypt a file with a secret key and then decrypt it again using that key. The encryption part works ...
1
vote
1answer
69 views

compact hardware implementation of inversion based 8-bit s-boxes

$\DeclareMathOperator{\GF}{GF}$ I cannot figure out how should I determine the matrix for transmission over $\GF(2^8)$ to $\GF(((2^2)^2)^2)$ in compact hardware implementation of inversion based 8-bit ...
-3
votes
2answers
1k views

Using symmetric-key cryptography

A group of 30 people who wish to establish pair-wise secure communications using symmetric-key cryptography. How many KEYS need to be exchanged in total?
30
votes
2answers
7k views

Rubik's Cube as Encryption

Consider this scenario: Alice gets a Rubik's Cube and peels off the colors from each piece. She then writes a small message on one of the faces of the cube and fills the remaining pieces with random ...
2
votes
1answer
171 views

Does key-length recommendation provided by NIST consider quantum computer?

Here we can see the suggested key-length by NIST in a few decades: https://www.keylength.com/en/4/#Biblio10 Does this consider quantum-computer?
1
vote
1answer
238 views

For a typical n-bit symmetric key, how many keys would be considered too weak to use?

I understand that all zeros or all ones would be weak for any cipher. And certain ciphers, e.g. DES, have a list of weak keys. But I assume that there would many 'patterns' that would be detected (if ...
4
votes
1answer
518 views

How to build disk encryption system using forward permutations like Gimli?

First of all, this is purely a thought experiment. The width of Gimli isn't even a power of two (384 bits), and secondary storage bus speeds aren't even worth using a high performance permutation like ...
1
vote
1answer
152 views

Indistinguishability in the presence of an eavesdropper attack scenario

The property of Indistinguishability in the presence of an eavesdropper as described in the following experiment: (tract from: Introduction to Modern Cryptography) It must be interpreted as a ...
1
vote
0answers
117 views

Difficulty of finding partially matching ciphertexts for a given plaintext when encrypted with two different keys

I'm trying to find a simple, practical proof-of-work scheme based purely on encryption (due to wide availability of optimized, hardware accelerated AES execution on most platforms, including modern ...
3
votes
2answers
550 views

How to recognize Authenticated Encryption with Associated Data ciphersuites

I have some doubts regarding AEAD ciphersuites and I need some clarification. In the following ciphersuites list: ...
5
votes
2answers
314 views

Password derived hash to encrypt known plaintext as password check

The title sounds way too adventurous for what it actually is. I am currently building a system which features some encryption. There is already a system in place, which is built after that scheme if ...
1
vote
1answer
131 views

Getting the Encryption Function From the Decryption Function + Decryption Key + Encrypted Item

Is it mathematically possible to always be able to get the encryption algorithm used to encrypt a certain item (file, number, text, ...etc.) by knowing the decryption algorithm that will be used to ...
7
votes
2answers
1k views

What exactly does s2k do in gpg

So I recently discovered the --s2k mode in gpg. Sadly it is not very well-documented. I mean, what is ...
1
vote
2answers
1k views

How much faster in symmetric cryptography compared to asymmetric cryptography? [closed]

I know that symmetric cryptography is faster than asymmetric, but on average how much faster would it be if you were encrypting and decrypting a 2MB file?
1
vote
0answers
81 views

Decrypting partial message.

I'm wondering whether such interesting symmetric-key encryption exists or not (from theoretical perspective): We encrypt a vector of messages $(m_1,m_2,\cdots,m_\ell)$ using the symmetric key $K$ to ...
6
votes
1answer
361 views

What is a differential trail?

From what I could find it relates input differences to output differences usually across multiple rounds. But is it the entire probability distribution over all output differences for one input ...
2
votes
3answers
182 views

Are there any deterministic multi-block encryption constructions that have an avalanche effect going both ways?

For common multi-block encryption schemes (CBC, CTR, CFB, stream ciphers, etc), if they are forced to be deterministic, a change in the plaintext will change only the current block and maybe future ...
0
votes
2answers
103 views

Signing an exchanged symmetric key that is asymmetrically encrypted

Consider the following implementation: Bob wants to communicate long-term with his team over an unsecured channel. Bob and all members of the team generate individual public/private keypairs (ex. ...
1
vote
1answer
1k views

Fast Symmetric Encryption Algorithms: My Options

Basically, the question above... I'm trying to implement encryption on the server, and I have another webserver that I can share a secret key with via TLS/SSL/HTTPS, so I do not really need ...
1
vote
1answer
458 views

NIST's Recommendations for Protection of CLASSIFIED Data?

In NIST Recommendation for Key Management Part 1 Rev 4, It states in Section 1.Intro This NIST Recommendation applies to U.S. government agencies using cryptography for the protection of their ...
3
votes
3answers
124 views

Encrypted messaging web app design

I’m implementing an encrypted messaging web app using JS. When composing a message, the user is provided with the public key of the recipients. A body field is also rendered for every recipient. After ...
6
votes
1answer
715 views

Is it possible to derive an asymmetric algorithm from a symmetric one?

Given the advancements in quantum computing, there's a lot of incentive to move away from the usual asymmetric cryptography. Is there a way to turn a symmetric algorithm (e.g. AES) into an asymmetric ...
0
votes
2answers
3k views

What is the difference between a Stream cipher and a Symmetric Encryption algorithm?

According to the Tag definitions: Stream Cipher: A stream cipher is an encryption algorithm which encrypts arbitrary length plaintext, using a key. Some stream ciphers generate a keystream from only ...
2
votes
2answers
364 views

Why do we need to go through multiple cycles in block cipher

According to Computer Networking: a top down approach, Chapter 8 (6th edition), block ciphers involves breaking the input message into blocks of size k, where generally k = 64. However since k = 64 ...
2
votes
0answers
242 views

Bit slice format of 4x4 s-boxes?

I have studied bit-sliced implementation in SERPENT block cipher and I need to use this technique to implement some 4x4 s-boxes. I couldn't find any procedure to obtain bit-sliced format in any paper ...
0
votes
1answer
59 views

Restricting symmetric key usage

I have a system where some clients communicate with a server. every client has its own name and role and some other parameters that sends these info to the server in every message and the server uses ...
10
votes
2answers
3k views

What is the correct way to implement PBKDF2 + AES CBC + HMAC?

I've been doing a lot of reading on the proper way to implement AES CBC mode with HMAC authentication. I've seen many explanations, however, I've had a hard time finding an actual real example (with ...
-2
votes
1answer
100 views

Explain Garbled circuit having function and single input?

I came across below Image of garbled circuit and want to know what exactly is garbled circuit and if we consider two party computation then how can we differentiate between f and x as Alice and Bob's ...
1
vote
2answers
2k views

How to create and send a symmetric key using GPG

I want to communicate with a friend (he lives in another country so we can't exchange fingerprints or keys physically, I could post him a USB disk but I'm sure I can do it through the web). I'm ...
1
vote
2answers
120 views

Should I use independent symmetric keys for each client should I use keys derived from a master key?

I have several clients that I communicate with from a central location. All connections are encrypted using static symmetric keys that are hard-coded in each client config file. I use a different key ...
1
vote
1answer
99 views

Yahalom Protocol

Here is the Yahalom Protocol: https://en.wikipedia.org/wiki/Yahalom_(protocol) I don't understand how Alice forms the 2 messages sent to Bob in the fourth step? Where does the data come from? For ...
4
votes
2answers
2k views

How to break homophonic substitutions and nomenclators with too many symbols?

Early attempts to thwart frequency analysis attacks on ciphers involved using homophonic substitutions, ie. some letters map to more than one ciphertext symbol. The earliest known example of this, ...
2
votes
1answer
464 views

What kind of symmetric-key algorithm to use with Diffie-Hellman?

Let's assume we use DH with a cyclic group modulo p. As I know safe length of p must be at least 1024 bits. That means that ...