Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Symmetric cryptosystems assume two communicating entities share a pre-established secret key.
8
votes
Accepted
Is there a correct way to generate a symmetric key?
GPG uses a Password-Based KDF (PBKDF, also known as a "password hash") to transform a password into a symmetric key. … For completeness, there are also Key-Based KDFs such as HKDF that can derive symmetric keys from other keys, but I suspect that's not what you're after. …
7
votes
1
answer
1k
views
Multi-target attacks on AES-CTR with a random nonce
128-bit block ciphers are vulnerable to multi-target attacks where the attacker seeks to attack a collection of keys instead of a single key. A simple example:
Generate keys $k_1, k_2, ...,k_{2^{40 …
2
votes
Accepted
Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20
256-bit confidentiality
Let's assume that we're using AES256-CTR and a 256-bit hash. A new 256-bit key $S$ is derived for each message. Since AES256 requires a 256-bit key, there are no extra b …
10
votes
Why is hybrid encryption more effective than other encryption scheme?
Alice also needs to first decrypt the symmetric key and then decrypt the message. It almost seems like a double work. … Using hybrid encryption, we can perform a single expensive RSA encrypt operation on a symmetric key, and do all of the remaining work using fast symmetric encryption like AES-GCM. …