Questions tagged [xor]

XOR, often written ⊕, is one of the basic operations on bits and bit-sequences. It is a building block of many cryptographic primitives (and some higher-level algorithms, like modes of operations).

Filter by
Sorted by
Tagged with
-1
votes
0answers
23 views

How can I find the key if I have Plain text and Cipher Text [closed]

I'm trying to obtain the key with plain text and cipher text. I guess the encryption algorithm is Vernam Cipher as it works with binary data rather than letters Plain text : 1011 0101 110 Cipher ...
0
votes
0answers
33 views

Approach used with XOR cipher in black box scenery

What's the approach used in cryptanalysis to make an decrypter for a simple xor stream cipher in a Black Box scenery with only the output?
2
votes
0answers
56 views

Find the key of an XOR cipher with multiple messages from the same key

For example, I have three messages, each known to be XOR encoded, and each have used the same key for each message for the XOR cipher. Encoded Message 1 (e1): 00100111010 Encoded Message 2 (e2): ...
1
vote
2answers
92 views

Secret sharing scheme WITHOUT Shamir Secrete Sharing

I am planning to use the following XOR scheme to divide a secret into only 2 shares (I do not want to use Shamir Secret Sharing for different reasons that are beyond the scope of this post). Here's ...
0
votes
1answer
51 views

Potential weaknesses when combining hash functions?

For consistency's sake, M is the message, H1 and H2 are separate hash functions. I've heard that concatenation or XORing hash outputs together do not provide improved security against preimage and ...
2
votes
2answers
79 views

Weakness in a CBC-like XOR cipher

A simple symmetric encryption algorithm can be written as follows: Input message M and 64 bit key $K$ Divide M into 64 bit size blocks $B_1...B_n$ Get first block $B_1$ and perform bit-wise $\oplus$ ...
0
votes
1answer
55 views

Boolean XOR function a valid way to verify the integrity of a message

Does the Boolean XOR function represent a valid way to verify the integrity of a message ?
1
vote
2answers
62 views

GMW Multiplication AND for 2 parties

I am looking into the GMW protocol's evaluation for multiplication in 2 parties. I have referred to different materials on it but I didn't exactly understand how $a_i b_j + a_j b_i$ is calculated in a ...
0
votes
1answer
39 views

Example of a Two-party GMW Protocol

I have been looking for a concrete example of GMW protocol for two parties. I was trying with the following example for computing $XOR$ of two parties: A's secret bit is $a = 0$, B's secret bit is $b ...
4
votes
1answer
128 views

Using Diffie–Hellman without a key derivation function

In an answer to another question, it was suggested that the shared secret derived from Diffie–Hellman key exchange could then be used directly as a one-time pad to encrypt a message (by XORing the ...
2
votes
1answer
46 views

Meaning of difference Δ delta

I tried to understand some crypto text but I am new to this. Does this: Let $X,X'$ be $\ell$-bit values, and $\Delta X=X\oplus X'$ means that $X$ and $X'$ have $\ell$ bits and $\Delta X=X-X'$ or ...
0
votes
0answers
68 views

What does a repeated byte between two XORed hexadecimal ciphers mean?

I have two different hexadecimal strings (of same length) that I think are encoded plain text strings. Out of curiosity I XORed them and I found a single hex byte repeated for the length of the two ...
2
votes
2answers
135 views

OTP with fixed plaintext

I have just learned about the OTP, how it uses XOR, and how it's secure if the keys are random. But what will happen when the same plaintext is used again with a new key? $c_1 = k_1 ⊕ p$ $c_2 = k_2 ...
1
vote
0answers
78 views

How to reverse this simple xor encryption function? [closed]

this code decrypts encrypted rom code from an arcade game pcb (it is from source code of Mame emulator) for each byte in rom... ...
23
votes
5answers
4k views

With sufficient randomness, is XOR an acceptable mechanism for encrypting?

I have heard criticism of various cryptosystems saying that "at their heart, they were just XOR." Is this just ignorance, or is there something inherently wrong with XOR based ciphers?
1
vote
0answers
36 views

Dining-Cryptographer Net (DC-Net) Scheme that Handles Collisions?

[Question edited at the request of Mods] I recently became fascinated with the elegant and simple solution that Chaum proposed for the Dining Cryptographers problem. If you are unfamiliar, please ...
3
votes
1answer
95 views

Solving a system of equations using both arithmetic and bitwise operations

At first I asked this question on Stackoverflow, where I was advised to ask here. So there is the question: I have a system of pretty simple equations: $x + y = A$ $f(x,y) + y = B$ $A, B$ are known....
0
votes
1answer
51 views

XOR PSK with random buffer

I need some guidance here: assuming I have the following: (PreSharedKey of 32 bytes) XOR (one time Random Buffer of 32 bytes) The only way to crack this should be brute forcing, correct? One of the ...
1
vote
0answers
75 views

Break an encryption made with XOR of a key and a known Nonce

My questions is general, but in my case regards the Kerberos protocol and the communication between the client first message and the KDC. Is there some problem in encrypting using a: (secret key XOR ...
0
votes
1answer
63 views

Is there any security issue if an attacker recovers the key stream generated by a stream cipher?

I've learned that a stream cipher like ChaCha20 generates a key stream that gets XORed with the plaintext to get the ciphertext... If an attacker knows the plaintext, he could just simply XOR that ...
1
vote
1answer
73 views

XOR of 16-bytes variables gives a result of size not equal to 16

I'm trying to write a XOR code for implementing CBC mode of operation from scratch but i seem to have some problem.The function takes two byte variables of 16bytes and the expected output should be ...
0
votes
1answer
76 views

PRNG XOR Pipeline

For an OTP I need the 'best' random data I can acquire. Please check if my thinking for stacking PRNGs together in a pipeline can only make the output statistically better, never worse?! So take a ...
-1
votes
2answers
82 views

Is there any vulnerability in this scheme?

We want to design a symmetric encryption scheme. Note that the following things are true for our system: The plaintext P will change every time for a given user. A user will choose a password which ...
0
votes
3answers
280 views

How secure is XOR-CBC?

How secure would this be? To be clear, I mean replacing the block cipher encryption step in the Wikipedia diagram explaining CBC with plain old XOR? EDIT: Replace ...
2
votes
1answer
73 views

Why is the second XOR operation in OCB mode necessary?

In Rogaway's OCB mode, the offset (derived from the key) ist XOR-added twice: Once to the plaintext block, and a second time after the Encryption. I am wondering, why the second XOR operation is ...
1
vote
3answers
858 views

What are the vulnerabilities of XOR in the following scenario?

What are the security vulnerabilities of the XOR operator in the following scenario: The Key, The Cyphertext and the Plaintext are the same size in bits. The Key is only used once and it's secret The ...
1
vote
1answer
61 views

Stream cipher - Many time pad

I understand the concept that when you xor the cipher texts you get the XOR messages cause the keys get XOR-ed and cancel out... This is at least the case when both the messages are of equal lengths. ...
1
vote
0answers
41 views

OTP Random Pad Renewal Without Extending Message

So I recently learned about the concept of a One Time Pad; and I from what I understand it means that if a XOR key is completely random and equal to or longer than the plaintext, it makes it so that ...
0
votes
0answers
49 views

Key size of a repeating key XOR-encrypted message using Hamming distance

To find possible key sizes for an encrypted message, I break the message into blocks with length s, ...
10
votes
1answer
3k views

XOR a set of random numbers

Basic question about XOR and entropy - given a set $S$ of pseudo-random numbers in the range $[0,b]$, will XORing them produce a new pseudo-random number in $[0,b]$ or will the operation decrease the ...
1
vote
3answers
516 views

How strong is XOR encryption of 256 bit plain text with 256 bit key?

I was wondering if we take just 256 bits of plain text and simply XOR every bit with a 256 bit key, how strong can it be ?
0
votes
2answers
86 views

Would XOR'ing two Argon2 keys add extra security?

When a user registers on the app, they need to provide a password they create and we provide them with a randomly generated passphrase (e.g. Apple Cat Ladder Fire). We then use Libsodium's ...
1
vote
1answer
147 views

Simple block cipher

I came up with this concept, which I thought would be pretty secure. So the idea is this, you have a message $M$, which you split up in blocks of each 256 bits. You generate a random (pseudo-random ...
11
votes
5answers
3k views

Why is XOR preferred over XNOR?

The XOR operator seems to be a frequently used building block inside many cryptographic primitives. As far as I can see, its most desirable properties seem be that for the XOR of two bits $a\oplus b=...
1
vote
1answer
460 views

Decrypting a vigenere cipher with a reused one-time pad

I understand that when a plaintext is encrypted with a key of the same length, it is referred to as a one-time pad. Now when this key is reused to encrypt another plaintext, there is potential for ...
0
votes
1answer
79 views

Secret Sharing between $x$ parties

So for an unknown number of parties $x$, I make $x-1$ random $n$-bit strings represented by {$r_1, r_2,...,r_{x-1}$}. Where $s$ is the complete string split up between $x$ parties (yes?). I then ...
9
votes
1answer
131 views

GCM mode of operation with long-term keys

Regarding GCM, NIST specifies the following: The total number of invocations of the authenticated encryption function shall not exceed $2^{32}$, including all IV lengths and all instances of the ...
1
vote
1answer
52 views

Definition of diffusion matrix

I've been studying this article and since I'm not studying cryptography in English and it is not my native language, I don't understand some of the terminology. More precisely: what are diffusion ...
2
votes
1answer
664 views

ChaCha20: is this a potentially safe way of using nonce derived from private key if the key/nonce pair is never reused, for a given plaintext?

Note: I realize in ChaCha20 the nonce should be random and unique each time follow certain constraints but am trying to determine whether there could be a safe way to use it just once if other ...
1
vote
1answer
46 views

How to handle multiple key-agreements

If I would use two different key-agreements e.g. SIDH and ECDH how would I handle these both derived keys? Is there a different between XOR or SHA-256 the two keys? (Would one reduce the level of ...
4
votes
1answer
426 views

Salsa20 Implementation: Sum of 2 Words with Carries Suppressed

I'm working on the 2nd part of the Salsa20 spec, and I want to implement a closure for the exclusive-or of two words(u32). The author defines the operation as the sum of two words with carries ...
0
votes
1answer
82 views

Why is this OTP decryption wrong? [closed]

i have a problem that goes: ...
1
vote
2answers
286 views

XOR and key reuse [duplicate]

I've been doing a bit of reading on the use of XOR and the dangers of key reuse. I'm aware that reusing a key can open a door for a frequency analysis attack on my plain text. So far, everything ...
3
votes
1answer
173 views

Circular hash collision where digest is pre-image: Could hash(a) = b, hash(b)=c, then hash(c)=a?

For any SHA-family of algorithms (including Keccak) except for SHA1, would it be theoretically possible for there to exist a pre-image a whose hash digest ...
2
votes
1answer
695 views

Does XOR'ing a random number with its inverse reduce its security if the result is a palindrome?

[And four related questions/examples below:] 2) If a random 256-bit number is XOR'ed with its reverse (i.e. the big-endian version XOR'ed with the little-endian version), does this reduce the ...
3
votes
1answer
954 views

One-time pad XOR question

For a one-time pad to be truly secure, do I need to use XOR? In other words, is a numerical OTP as secure as a XORed one? I'm new to cryptography, so this might not even make sense.
5
votes
2answers
734 views

Using a one-time pad with a block cipher

The one-time pad is often described with a simple XOR cipher. This is nice for showing the theoretical strengths of the one-time pad, but not so great in real-world scenarios where key reuse is a ...
6
votes
1answer
1k views

Hash functions to generate a one-time pad

Maybe this is a newbie question: Stream cypher, will XOR message bits with one-time pad bits. Suppose I have a pseudorandom number generator, like a Mersenne Twister or something similar. I could use ...
5
votes
2answers
241 views

Collision resistance of partial SHA-256 hashes XOR'ed

My hashing algorithm computes the SHA-256 for each of 12 input strings and XORs them to get the final hash. Is there a risk of an attacker being able to forge 2 sets of inputs that yield the same ...
-2
votes
3answers
1k views

Why the AES perform encryption in 10 rounds Instead of one?

I'm a Master's Degree student and researching about AES-128 encryption. My Advisor asked me a question about necessity of iterative rounds in AES. he asked:"why we couldn't encrypt a 128-bit plaintext ...

1
2 3 4 5