Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 7777

AES (Advanced Encryption Standard) is a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.

0 votes

NIST tests for AES

I am not aware about a software doing what you're asking. Moreover I think it would be quite difficult to have a software testing for a generic implementation. It would be possible if there was a stan …
ddddavidee's user avatar
  • 3,354
4 votes
Accepted

GCM: use the same key:IV pair to encrypt file and filename

They use a different way, the encrypt the filename with AES-EME. EME (ECB-Mix-ECB) is a wide-block encryption mode developed by Halevi and Rogaway in 2003 [eme]. … EME-32 is a concrete implementation of EME with a fixed length of 32 AES blocks. …
ddddavidee's user avatar
  • 3,354
3 votes

How secure is AES-256, but with an effective key length of 56-bits?

One needs to have a key with the proper length to use the AES encryption algorithm. … Therefore an AES-256 with a 56-bit effective key length should not be considered as secure. …
ddddavidee's user avatar
  • 3,354
1 vote
Accepted

How to generate whitebox AES decryption algorithm and code, with existing WB-AES encryption ...

Both set are generated using, of course, the same secret AES key. What are the important steps to modify an WB encryption project into a WB decryption project? … EDIT: more details are available on the AES standard publication at Section 5.3.5 where the Equivalent Inverse Cipher is described. Is there any WB AES decryption implementation for me to read? …
ddddavidee's user avatar
  • 3,354
0 votes

"Weak" implementation of AES-CTR?

(this is very similar to the One Time Pad encryption, but with the random string generated by the AES) Reusing the counter with the same key means re-generating the same key-dependent random string, breaking … You could probably give a look to the AES-SIV construction, SIV stands for Syntetic IV where the nonce is generated from the message itself, rather than being an explicit input into the algorithm. …
ddddavidee's user avatar
  • 3,354
2 votes

Multiplicative Inverse in AES

The inverse in AES is defined over a particular field. All the operation are done in this field. The Rijndael finite field is defined as follow: $GF(2^8) = GF(2)[x]/(x^8 + x^4 + x^3 + x + 1)$. … There are several way to implement the inversion and the affine transformation described in the AES to get the final SBox. …
ddddavidee's user avatar
  • 3,354
19 votes
Accepted

If you encrypt an image (AES), is it still an image and can you view it?

convert the Tux to PPM with Gimp # Then take the header apart head -n 4 Tux.ppm > header.txt tail -n +5 Tux.ppm > body.bin # Then encrypt with ECB (experiment with some different keys) openssl enc -aes
ddddavidee's user avatar
  • 3,354
1 vote

How AES-CTR is used in AES-GCM to generate cipherText and a authTag to authenticate the ciph...

Indeed, AES-GCM is defined as AES-CTR + GMAC as authentication code. … The difference is that AES-CTR does not provide integrity protection and an AuthTag has to be added (could be HMAC, or CBC-MAC for example); on the other side the AES-GCM provides both protection (confidentiality …
ddddavidee's user avatar
  • 3,354
-2 votes

AES key equal to IV (CBC mode)

Yes IV is not intended to be secret. It is given in clear with the ciphertext (usually the first block of it). An attacker, given the ciphertext, can recover the first 128 bits, use them as the IV an …
ddddavidee's user avatar
  • 3,354
1 vote

Break AES-CFB mode having access to a AES-CTR black box

It is quite easy, try to imagine if you have only one block of plaintext and you encrypt it under CFB or CTR with the same IV... (using the black box you can actually get the encryption of any IV of …
ddddavidee's user avatar
  • 3,354
17 votes
Accepted

Where is the key in white-box AES cryptography?

But, of course, this table would be ${HUGE}$ (e.g.: for the AES: $2^{128} \times 128$ bits, I don't even know how to write this quantity, but could be approximated by $2^{92}$ Terabytes). … Resume of white-box applied in AES algorithm (slides 18 - 24). …
ddddavidee's user avatar
  • 3,354
4 votes

Ways to make white-box cryptography AES implementation more difficult to be broken

obfuscation aims to hide the logic of the obfuscated algorithm, and usually, this is not the same security target of such situation you described, code obfuscation aims to hide that the obfuscated code is an AES … obfuscation in this context is used to hide how it is computed and in particular when/where the key is loaded in memory, data obfuscation is used to hide the link between some loaded data and the plain AES
ddddavidee's user avatar
  • 3,354
2 votes

Is it possible to decrypt the 2nd byte of AES-256-CFB-8 ciphertext without decrypting the 1s...

CFB works as a stream cipher, where the random stream is generated encrypting the previous block of ciphertext. Then, the plaintext is just xored with this random generated stream. To decrypt a pa …
ddddavidee's user avatar
  • 3,354
2 votes

Initialization vector in symmetric-key encryption

No, you can't. A symmetric encryption scheme without a random IV is not sure at all. The scheme is deterministic. from wikipedia: In cryptography, an initialization vector (IV) or starting variable ( …
ddddavidee's user avatar
  • 3,354
3 votes

Variants of AES?

There is book Algebraic Aspects of the Advanced Encryption Standard thats gives a good algebraic description of the AES algorithm. …
ddddavidee's user avatar
  • 3,354

15 30 50 per page