Questions tagged [white-box]
In cryptography, white box analysis means extracting a secret value from an implementation of a function that uses the value.
30
questions
3
votes
1answer
56 views
Question about white-box rsa algorithm
I found a scheme for white-box RSA. It seems to protect the input and output of modular operations.
I'm curious about how to analyze the security of this solution.
Does anybody know anything about it?
0
votes
0answers
36 views
key recovery attack vs key extraction attack
I want to know what is the difference between the Key Recovery Attack and the Key Extraction Attack, especially in WhiteBox Cryptography?
I guess key recovery is for the BlackBox and key extraction is ...
2
votes
0answers
41 views
How is the 'Algebraic Degree' calculated in the paper about analysing the white-box AES(Chow et al. 2002) by exploiting internal collisions?
This paper proposed a new attack on the initial white-box AES implementation of Chow et al.
In order to determine the good solution, we use the
particular structure of the function $S_{0}$.
$S^{-1} \...
3
votes
4answers
664 views
Theoretical notion of white-box
Is there any theoretically safe notion of white-box?
I have been reading about white-box [1, 2, 3] recently. It seems white-box deals with code obfuscation and its not known whether a perfect white-...
1
vote
1answer
96 views
Whitebox AES: why not steal the whole whitebox?
If I understand correctly, Whitebox AES is a way of transforming decryption code to make impossible to recover the decryption key, even if you have access to the code.
But what's stopping someone from ...
0
votes
0answers
104 views
How to use Whitebox aes
There are server programs and client programs.
Prepare two keys (A, B) for AES.
The A key creates an encryption table in advance with WhiteboxAes.
The B key creates a decryption table in advance with ...
3
votes
1answer
291 views
What's the point of hiding the key in white box cryptography if the attacker already has full access to the encryption (or decryption) implementation?
The attacker doesn't need the key in order to decrypt ciphertexts or encrypt plaintexts since he/she already has the full implementation.
So what's the point of hiding the key?
What advantage would ...
4
votes
1answer
144 views
What are some use cases for white-box digital signatures?
There were 2 papers published in the last year, that describe 2 different white-box identity-based digital signature schemes:
White-Box Implementation of the Identity-Based Signature Scheme in the ...
1
vote
0answers
63 views
What if an AES Whitebox 1024-bit (or larger key) is created? Does it increase complexity consistently?
Following the Chow et al paper and Muir's tutorial, I was able to implement the AES algorithm using tables embedding keys of 128, 192 and 256-bit sizes, later extended to 1024, 2048 and 4096-bit sizes....
1
vote
1answer
208 views
(Whitebox Crypto) Using ChaCha20, is it safe to reduce the nonce length in a single block cipher?
I am willing to write a Whitebox Crypto unit using ChaCha20 algorithm (Bernstein, D. 2008) for an input consisting of a single block. The fact it is going to be a single block cipher is of special ...
2
votes
0answers
90 views
Is it possible to enhance white-box cryptography security by homomorphic encryption?
Background:
Let's discussed based on published symmetric white-box crypto only, such as Chow's white-box AES.
I only know basic concepts/objectives of homomorphic encryption, such as PHE and FHE. ...
1
vote
2answers
73 views
Derive operations from an arbitrary number
I don't really know how to phrase this question, so I'll just mention the idea. This is partially reminiscent (at least in spirit to white box crypto): Can one derive arithmetic operations from a ...
5
votes
0answers
689 views
Any white-box cryptography for asymmetric-key? What is the latest status of white-box cryptography? [closed]
I am learning white-box cryptography. So far, I find the following historical research or implementations, for examples:
Published white-box AES algorithms
E.g., Chow's WB AES and WB DES (2002), WB ...
0
votes
2answers
602 views
How to generate whitebox AES decryption algorithm and code, with existing WB-AES encryption code?
I can find several whitebox AES 128 implementations on Github, such as wbaes-1, wbaes-2, wbaes-3, etc. All of them are developed based on WB AES encryption. Ideally, most implementations include two ...
8
votes
5answers
2k views
Ways to make white-box cryptography AES implementation more difficult to be broken
Background: I want to use white-box cryptography to hide the keys stored in a client application.
I am looking for existing implementations of white-box cryptography, such as AES 128 or 256. But I ...
12
votes
2answers
705 views
How were the best AES whiteboxes in the CHES 2017 CTF challenge built and broken?
Along CHES 2017 was a Capture the Flag Challenge, aka The WhibOx Contest.
Participants submit C source code with interface
...
4
votes
2answers
1k views
What do we need white box crypto for?
I am familiar with white box cryptography, but somehow I still fail to see its potential applications? Which situations would necessitate using it? Maybe you can even give me an example or two?
I ...
12
votes
1answer
4k views
Where is the key in white-box AES cryptography?
After an initial study of white-box cryptography, specially around the first article (Chow et. al.), I understood each step of transforming the lookup tables of AES into new ones.
If I understood it ...
1
vote
1answer
192 views
Software Security Impossible in Non-Trusted Hardware?
Fundamentally it is impossible to protect software if you can't trust the execution platform (e.g. using a TPM), so what is the point of software security then?
With vendors claim that their white-...
7
votes
3answers
2k views
How to protect key in software
I need to encrypt/decrypt data from my software by AES, the problem is how to make the AES key secure, there is no HSM, should I hard code the key in my code? It seems that a hacker can read the key ...
2
votes
1answer
1k views
How do you implement a cipher as one lookup table?
I am reading up on whitebox cryptography and have trouble understanding how are ciphers implemented as one lookup table?
Assuming my plaintext is just 4 bits so the size of my lookup table should be $...
1
vote
1answer
628 views
open source whitebox-crypto implementation
I am trying to code a simple WBC situation to help my understanding about white-box cryptography.
Details:
I have 2 programs, a "server" and a "client", the server utilises caesar cipher (key = 2) ...
-1
votes
1answer
526 views
white-box cryptography and its applications [closed]
I am a programmer who is doing research into whitebox cryptography.
What I hope to do is to use WBC for an DRM application however as some of us may know, WBC is theoretically impossible therefore I ...
14
votes
4answers
1k views
Why to try get key out of white box crypto? How can one protect WBC itself?
Help me understand the following. With WBC the question is mainly being stated as can one try to break WBC to identify the key. My question is: Why would one ever want to do that anyways?
If one can ...
20
votes
5answers
4k views
Are there cryptographic hash functions that can be computed using only paper and pen without leaking any information about the plaintext?
I am looking for a cryptographic hash function that can be computed by a human using only paper and pen without ever leaking any information about the plaintext on the paper.
The cryptographic hash ...
2
votes
1answer
165 views
How to collect, process, and transmit data securely?
In my question "Authenticating data generated by a particular build of an open source program", Dave Cary requested that I post a question stating my real problem on a high level rather than the ...
6
votes
4answers
247 views
Authenticating data generated by a particular build of an open source program
[I was torn between posting here or security.stackexchange.com. In the end, I felt that this was more of a design question, rather than an implementation question and so chose this forum.]
My ...
43
votes
3answers
24k views
What are the differences Between “White-Box Cryptography” and “Code Obfuscation”?
I have been reading the question "What is a white-box implementation of a cryptographic algorithm?" and it led to this short article / Q&A which states in question 2:
Q2: What is the ...
11
votes
6answers
11k views
Is there any open-source white-box implementation of AES or DES? [closed]
I googled it, but got no result. There is a binary executable of a white-box implementation of DES (scroll down), but no source code is provided.
The same page also links various papers about white-...
31
votes
2answers
12k views
What is a white-box implementation of a cryptographic algorithm?
What is a white-box implementation?
Does a white-box implementation have specific properties?