Questions tagged [white-box]
In cryptography, white box analysis means extracting a secret value from an implementation of a function that uses the value.
33
questions
0
votes
0
answers
34
views
Is Whitebox Encryption not just a fancy obfuscation? [duplicate]
Whitebox Encryption embedds the key inside the encryption algorithm in a way that makes it difficult to reverse engineer. However it seems all implementations can be efficiently broken.
So, is a ...
- 111
5
votes
1
answer
167
views
Status of whitebox cryptography in 2022
There has been a lot of discussion about whitebox cryptography in recent years. However, I haven't found any signs of real world applications using it.
Are there any real world IT solutions depending ...
- 281
0
votes
1
answer
44
views
If keeping the S-Boxes secret in SPN ciphers increase they security, does using one different S-Box set per round in them increases even more? [duplicate]
I read in this paper that keeping the S-boxes secret in AES raise its security from 128-256-bits to 1812-1940-bits.
Let's suppose I use one different S-Boxes set per single round.
/\ Does this ...
- 533
3
votes
1
answer
77
views
Question about white-box rsa algorithm
I found a scheme for white-box RSA. It seems to protect the input and output of modular operations.
I'm curious about how to analyze the security of this solution.
Does anybody know anything about it?
- 41
0
votes
0
answers
45
views
key recovery attack vs key extraction attack
I want to know what is the difference between the Key Recovery Attack and the Key Extraction Attack, especially in WhiteBox Cryptography?
I guess key recovery is for the BlackBox and key extraction is ...
- 101
2
votes
0
answers
43
views
How is the 'Algebraic Degree' calculated in the paper about analysing the white-box AES(Chow et al. 2002) by exploiting internal collisions?
This paper proposed a new attack on the initial white-box AES implementation of Chow et al.
In order to determine the good solution, we use the
particular structure of the function $S_{0}$.
$S^{-1} \...
- 21
3
votes
4
answers
695
views
Theoretical notion of white-box
Is there any theoretically safe notion of white-box?
I have been reading about white-box [1, 2, 3] recently. It seems white-box deals with code obfuscation and its not known whether a perfect white-...
- 593
1
vote
1
answer
113
views
Whitebox AES: why not steal the whole whitebox?
If I understand correctly, Whitebox AES is a way of transforming decryption code to make impossible to recover the decryption key, even if you have access to the code.
But what's stopping someone from ...
- 113
0
votes
0
answers
118
views
How to use Whitebox aes
There are server programs and client programs.
Prepare two keys (A, B) for AES.
The A key creates an encryption table in advance with WhiteboxAes.
The B key creates a decryption table in advance with ...
- 1
3
votes
1
answer
326
views
What's the point of hiding the key in white box cryptography if the attacker already has full access to the encryption (or decryption) implementation?
The attacker doesn't need the key in order to decrypt ciphertexts or encrypt plaintexts since he/she already has the full implementation.
So what's the point of hiding the key?
What advantage would ...
4
votes
2
answers
218
views
What are some use cases for white-box digital signatures?
There were 2 papers published in the last year, that describe 2 different white-box identity-based digital signature schemes:
White-Box Implementation of the Identity-Based Signature Scheme in the ...
1
vote
0
answers
70
views
What if an AES Whitebox 1024-bit (or larger key) is created? Does it increase complexity consistently?
Following the Chow et al paper and Muir's tutorial, I was able to implement the AES algorithm using tables embedding keys of 128, 192 and 256-bit sizes, later extended to 1024, 2048 and 4096-bit sizes....
1
vote
1
answer
244
views
(Whitebox Crypto) Using ChaCha20, is it safe to reduce the nonce length in a single block cipher?
I am willing to write a Whitebox Crypto unit using ChaCha20 algorithm (Bernstein, D. 2008) for an input consisting of a single block. The fact it is going to be a single block cipher is of special ...
2
votes
0
answers
99
views
Is it possible to enhance white-box cryptography security by homomorphic encryption?
Background:
Let's discussed based on published symmetric white-box crypto only, such as Chow's white-box AES.
I only know basic concepts/objectives of homomorphic encryption, such as PHE and FHE. ...
- 447
1
vote
2
answers
74
views
Derive operations from an arbitrary number
I don't really know how to phrase this question, so I'll just mention the idea. This is partially reminiscent (at least in spirit to white box crypto): Can one derive arithmetic operations from a ...
- 155
5
votes
0
answers
800
views
Any white-box cryptography for asymmetric-key? What is the latest status of white-box cryptography? [closed]
I am learning white-box cryptography. So far, I find the following historical research or implementations, for examples:
Published white-box AES algorithms
E.g., Chow's WB AES and WB DES (2002), WB ...
- 447
0
votes
2
answers
676
views
How to generate whitebox AES decryption algorithm and code, with existing WB-AES encryption code?
I can find several whitebox AES 128 implementations on Github, such as wbaes-1, wbaes-2, wbaes-3, etc. All of them are developed based on WB AES encryption. Ideally, most implementations include two ...
- 447
8
votes
5
answers
2k
views
Ways to make white-box cryptography AES implementation more difficult to be broken
Background: I want to use white-box cryptography to hide the keys stored in a client application.
I am looking for existing implementations of white-box cryptography, such as AES 128 or 256. But I ...
- 447
12
votes
2
answers
721
views
How were the best AES whiteboxes in the CHES 2017 CTF challenge built and broken?
Along CHES 2017 was a Capture the Flag Challenge, aka The WhibOx Contest.
Participants submit C source code with interface
...
- 125k
4
votes
2
answers
1k
views
What do we need white box crypto for?
I am familiar with white box cryptography, but somehow I still fail to see its potential applications? Which situations would necessitate using it? Maybe you can even give me an example or two?
I ...
user37229
13
votes
1
answer
4k
views
Where is the key in white-box AES cryptography?
After an initial study of white-box cryptography, specially around the first article (Chow et. al.), I understood each step of transforming the lookup tables of AES into new ones.
If I understood it ...
- 137
1
vote
1
answer
192
views
Software Security Impossible in Non-Trusted Hardware?
Fundamentally it is impossible to protect software if you can't trust the execution platform (e.g. using a TPM), so what is the point of software security then?
With vendors claim that their white-...
- 11
7
votes
3
answers
2k
views
How to protect key in software
I need to encrypt/decrypt data from my software by AES, the problem is how to make the AES key secure, there is no HSM, should I hard code the key in my code? It seems that a hacker can read the key ...
- 113
2
votes
1
answer
2k
views
How do you implement a cipher as one lookup table?
I am reading up on whitebox cryptography and have trouble understanding how are ciphers implemented as one lookup table?
Assuming my plaintext is just 4 bits so the size of my lookup table should be $...
- 198
1
vote
1
answer
658
views
open source whitebox-crypto implementation
I am trying to code a simple WBC situation to help my understanding about white-box cryptography.
Details:
I have 2 programs, a "server" and a "client", the server utilises caesar cipher (key = 2) ...
- 198
-1
votes
1
answer
531
views
white-box cryptography and its applications [closed]
I am a programmer who is doing research into whitebox cryptography.
What I hope to do is to use WBC for an DRM application however as some of us may know, WBC is theoretically impossible therefore I ...
- 198
14
votes
4
answers
1k
views
Why to try get key out of white box crypto? How can one protect WBC itself?
Help me understand the following. With WBC the question is mainly being stated as can one try to break WBC to identify the key. My question is: Why would one ever want to do that anyways?
If one can ...
- 141
20
votes
5
answers
5k
views
Are there cryptographic hash functions that can be computed using only paper and pen without leaking any information about the plaintext?
I am looking for a cryptographic hash function that can be computed by a human using only paper and pen without ever leaking any information about the plaintext on the paper.
The cryptographic hash ...
- 362
2
votes
1
answer
168
views
How to collect, process, and transmit data securely?
In my question "Authenticating data generated by a particular build of an open source program", Dave Cary requested that I post a question stating my real problem on a high level rather than the ...
- 181
6
votes
4
answers
248
views
Authenticating data generated by a particular build of an open source program
[I was torn between posting here or security.stackexchange.com. In the end, I felt that this was more of a design question, rather than an implementation question and so chose this forum.]
My ...
- 181
43
votes
3
answers
25k
views
What are the differences Between “White-Box Cryptography” and “Code Obfuscation”?
I have been reading the question "What is a white-box implementation of a cryptographic algorithm?" and it led to this short article / Q&A which states in question 2:
Q2: What is the ...
- 658
11
votes
6
answers
12k
views
Is there any open-source white-box implementation of AES or DES? [closed]
I googled it, but got no result. There is a binary executable of a white-box implementation of DES (scroll down), but no source code is provided.
The same page also links various papers about white-...
- 3,882
31
votes
2
answers
13k
views
What is a white-box implementation of a cryptographic algorithm?
What is a white-box implementation?
Does a white-box implementation have specific properties?
- 3,882