Questions tagged [white-box]

In cryptography, white box analysis means extracting a secret value from an implementation of a function that uses the value.

Filter by
Sorted by
Tagged with
0 votes
0 answers
34 views

Is Whitebox Encryption not just a fancy obfuscation? [duplicate]

Whitebox Encryption embedds the key inside the encryption algorithm in a way that makes it difficult to reverse engineer. However it seems all implementations can be efficiently broken. So, is a ...
user avatar
  • 111
5 votes
1 answer
167 views

Status of whitebox cryptography in 2022

There has been a lot of discussion about whitebox cryptography in recent years. However, I haven't found any signs of real world applications using it. Are there any real world IT solutions depending ...
user avatar
  • 281
0 votes
1 answer
44 views

If keeping the S-Boxes secret in SPN ciphers increase they security, does using one different S-Box set per round in them increases even more? [duplicate]

I read in this paper that keeping the S-boxes secret in AES raise its security from 128-256-bits to 1812-1940-bits. Let's suppose I use one different S-Boxes set per single round. /\ Does this ...
user avatar
3 votes
1 answer
77 views

Question about white-box rsa algorithm

I found a scheme for white-box RSA. It seems to protect the input and output of modular operations. I'm curious about how to analyze the security of this solution. Does anybody know anything about it?
user avatar
  • 41
0 votes
0 answers
45 views

key recovery attack vs key extraction attack

I want to know what is the difference between the Key Recovery Attack and the Key Extraction Attack, especially in WhiteBox Cryptography? I guess key recovery is for the BlackBox and key extraction is ...
user avatar
  • 101
2 votes
0 answers
43 views

How is the 'Algebraic Degree' calculated in the paper about analysing the white-box AES(Chow et al. 2002) by exploiting internal collisions?

This paper proposed a new attack on the initial white-box AES implementation of Chow et al. In order to determine the good solution, we use the particular structure of the function $S_{0}$. $S^{-1} \...
user avatar
  • 21
3 votes
4 answers
695 views

Theoretical notion of white-box

Is there any theoretically safe notion of white-box? I have been reading about white-box [1, 2, 3] recently. It seems white-box deals with code obfuscation and its not known whether a perfect white-...
user avatar
  • 593
1 vote
1 answer
113 views

Whitebox AES: why not steal the whole whitebox?

If I understand correctly, Whitebox AES is a way of transforming decryption code to make impossible to recover the decryption key, even if you have access to the code. But what's stopping someone from ...
user avatar
0 votes
0 answers
118 views

How to use Whitebox aes

There are server programs and client programs. Prepare two keys (A, B) for AES. The A key creates an encryption table in advance with WhiteboxAes. The B key creates a decryption table in advance with ...
user avatar
3 votes
1 answer
326 views

What's the point of hiding the key in white box cryptography if the attacker already has full access to the encryption (or decryption) implementation?

The attacker doesn't need the key in order to decrypt ciphertexts or encrypt plaintexts since he/she already has the full implementation. So what's the point of hiding the key? What advantage would ...
user avatar
4 votes
2 answers
218 views

What are some use cases for white-box digital signatures?

There were 2 papers published in the last year, that describe 2 different white-box identity-based digital signature schemes: White-Box Implementation of the Identity-Based Signature Scheme in the ...
user avatar
1 vote
0 answers
70 views

What if an AES Whitebox 1024-bit (or larger key) is created? Does it increase complexity consistently?

Following the Chow et al paper and Muir's tutorial, I was able to implement the AES algorithm using tables embedding keys of 128, 192 and 256-bit sizes, later extended to 1024, 2048 and 4096-bit sizes....
user avatar
1 vote
1 answer
244 views

(Whitebox Crypto) Using ChaCha20, is it safe to reduce the nonce length in a single block cipher?

I am willing to write a Whitebox Crypto unit using ChaCha20 algorithm (Bernstein, D. 2008) for an input consisting of a single block. The fact it is going to be a single block cipher is of special ...
user avatar
2 votes
0 answers
99 views

Is it possible to enhance white-box cryptography security by homomorphic encryption?

Background: Let's discussed based on published symmetric white-box crypto only, such as Chow's white-box AES. I only know basic concepts/objectives of homomorphic encryption, such as PHE and FHE. ...
user avatar
  • 447
1 vote
2 answers
74 views

Derive operations from an arbitrary number

I don't really know how to phrase this question, so I'll just mention the idea. This is partially reminiscent (at least in spirit to white box crypto): Can one derive arithmetic operations from a ...
user avatar
  • 155
5 votes
0 answers
800 views

Any white-box cryptography for asymmetric-key? What is the latest status of white-box cryptography? [closed]

I am learning white-box cryptography. So far, I find the following historical research or implementations, for examples: Published white-box AES algorithms E.g., Chow's WB AES and WB DES (2002), WB ...
user avatar
  • 447
0 votes
2 answers
676 views

How to generate whitebox AES decryption algorithm and code, with existing WB-AES encryption code?

I can find several whitebox AES 128 implementations on Github, such as wbaes-1, wbaes-2, wbaes-3, etc. All of them are developed based on WB AES encryption. Ideally, most implementations include two ...
user avatar
  • 447
8 votes
5 answers
2k views

Ways to make white-box cryptography AES implementation more difficult to be broken

Background: I want to use white-box cryptography to hide the keys stored in a client application. I am looking for existing implementations of white-box cryptography, such as AES 128 or 256. But I ...
user avatar
  • 447
12 votes
2 answers
721 views

How were the best AES whiteboxes in the CHES 2017 CTF challenge built and broken?

Along CHES 2017 was a Capture the Flag Challenge, aka The WhibOx Contest. Participants submit C source code with interface ...
user avatar
  • 125k
4 votes
2 answers
1k views

What do we need white box crypto for?

I am familiar with white box cryptography, but somehow I still fail to see its potential applications? Which situations would necessitate using it? Maybe you can even give me an example or two? I ...
user avatar
13 votes
1 answer
4k views

Where is the key in white-box AES cryptography?

After an initial study of white-box cryptography, specially around the first article (Chow et. al.), I understood each step of transforming the lookup tables of AES into new ones. If I understood it ...
user avatar
  • 137
1 vote
1 answer
192 views

Software Security Impossible in Non-Trusted Hardware?

Fundamentally it is impossible to protect software if you can't trust the execution platform (e.g. using a TPM), so what is the point of software security then? With vendors claim that their white-...
user avatar
7 votes
3 answers
2k views

How to protect key in software

I need to encrypt/decrypt data from my software by AES, the problem is how to make the AES key secure, there is no HSM, should I hard code the key in my code? It seems that a hacker can read the key ...
user avatar
  • 113
2 votes
1 answer
2k views

How do you implement a cipher as one lookup table?

I am reading up on whitebox cryptography and have trouble understanding how are ciphers implemented as one lookup table? Assuming my plaintext is just 4 bits so the size of my lookup table should be $...
user avatar
  • 198
1 vote
1 answer
658 views

open source whitebox-crypto implementation

I am trying to code a simple WBC situation to help my understanding about white-box cryptography. Details: I have 2 programs, a "server" and a "client", the server utilises caesar cipher (key = 2) ...
user avatar
  • 198
-1 votes
1 answer
531 views

white-box cryptography and its applications [closed]

I am a programmer who is doing research into whitebox cryptography. What I hope to do is to use WBC for an DRM application however as some of us may know, WBC is theoretically impossible therefore I ...
user avatar
  • 198
14 votes
4 answers
1k views

Why to try get key out of white box crypto? How can one protect WBC itself?

Help me understand the following. With WBC the question is mainly being stated as can one try to break WBC to identify the key. My question is: Why would one ever want to do that anyways? If one can ...
user avatar
  • 141
20 votes
5 answers
5k views

Are there cryptographic hash functions that can be computed using only paper and pen without leaking any information about the plaintext?

I am looking for a cryptographic hash function that can be computed by a human using only paper and pen without ever leaking any information about the plaintext on the paper. The cryptographic hash ...
user avatar
2 votes
1 answer
168 views

How to collect, process, and transmit data securely?

In my question "Authenticating data generated by a particular build of an open source program", Dave Cary requested that I post a question stating my real problem on a high level rather than the ...
user avatar
  • 181
6 votes
4 answers
248 views

Authenticating data generated by a particular build of an open source program

[I was torn between posting here or security.stackexchange.com. In the end, I felt that this was more of a design question, rather than an implementation question and so chose this forum.] My ...
user avatar
  • 181
43 votes
3 answers
25k views

What are the differences Between “White-Box Cryptography” and “Code Obfuscation”?

I have been reading the question "What is a white-box implementation of a cryptographic algorithm?" and it led to this short article / Q&A which states in question 2: Q2: What is the ...
user avatar
  • 658
11 votes
6 answers
12k views

Is there any open-source white-box implementation of AES or DES? [closed]

I googled it, but got no result. There is a binary executable of a white-box implementation of DES (scroll down), but no source code is provided. The same page also links various papers about white-...
user avatar
  • 3,882
31 votes
2 answers
13k views

What is a white-box implementation of a cryptographic algorithm?

What is a white-box implementation? Does a white-box implementation have specific properties?
user avatar
  • 3,882