Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 15063

Symmetric cryptosystems assume two communicating entities share a pre-established secret key.

8 votes
Accepted

Is there a correct way to generate a symmetric key?

GPG uses a Password-Based KDF (PBKDF, also known as a "password hash") to transform a password into a symmetric key. … For completeness, there are also Key-Based KDFs such as HKDF that can derive symmetric keys from other keys, but I suspect that's not what you're after. …
Tim McLean's user avatar
  • 2,894
7 votes
1 answer
1k views

Multi-target attacks on AES-CTR with a random nonce

128-bit block ciphers are vulnerable to multi-target attacks where the attacker seeks to attack a collection of keys instead of a single key. A simple example: Generate keys $k_1, k_2, ...,k_{2^{40 …
Tim McLean's user avatar
  • 2,894
2 votes
Accepted

Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20

256-bit confidentiality Let's assume that we're using AES256-CTR and a 256-bit hash. A new 256-bit key $S$ is derived for each message. Since AES256 requires a 256-bit key, there are no extra b …
Tim McLean's user avatar
  • 2,894
10 votes

Why is hybrid encryption more effective than other encryption scheme?

Alice also needs to first decrypt the symmetric key and then decrypt the message. It almost seems like a double work. … Using hybrid encryption, we can perform a single expensive RSA encrypt operation on a symmetric key, and do all of the remaining work using fast symmetric encryption like AES-GCM. …
Tim McLean's user avatar
  • 2,894