Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 7777

AES (Advanced Encryption Standard) is a symmetrical block-cipher algorithm with a 128-bit block size, and key sizes of 128, 192 or 256 bits.

19 votes
Accepted

If you encrypt an image (AES), is it still an image and can you view it?

convert the Tux to PPM with Gimp # Then take the header apart head -n 4 Tux.ppm > header.txt tail -n +5 Tux.ppm > body.bin # Then encrypt with ECB (experiment with some different keys) openssl enc -aes
ddddavidee's user avatar
  • 3,354
17 votes
Accepted

Where is the key in white-box AES cryptography?

But, of course, this table would be ${HUGE}$ (e.g.: for the AES: $2^{128} \times 128$ bits, I don't even know how to write this quantity, but could be approximated by $2^{92}$ Terabytes). … Resume of white-box applied in AES algorithm (slides 18 - 24). …
ddddavidee's user avatar
  • 3,354
4 votes
Accepted

GCM: use the same key:IV pair to encrypt file and filename

They use a different way, the encrypt the filename with AES-EME. EME (ECB-Mix-ECB) is a wide-block encryption mode developed by Halevi and Rogaway in 2003 [eme]. … EME-32 is a concrete implementation of EME with a fixed length of 32 AES blocks. …
ddddavidee's user avatar
  • 3,354
4 votes
Accepted

Storing salts and iteration number?

The reason we add salts to the key derivation process it to make the key hash image unique for a given password. Actually a salt is added to remove weakness when an attacker has a list of "most common …
ddddavidee's user avatar
  • 3,354
4 votes

Ways to make white-box cryptography AES implementation more difficult to be broken

obfuscation aims to hide the logic of the obfuscated algorithm, and usually, this is not the same security target of such situation you described, code obfuscation aims to hide that the obfuscated code is an AES … obfuscation in this context is used to hide how it is computed and in particular when/where the key is loaded in memory, data obfuscation is used to hide the link between some loaded data and the plain AES
ddddavidee's user avatar
  • 3,354
3 votes
Accepted

Attacking a hardware AES implementation if it leaks the intermediate round states

Given a AES round, all the operation between the two AddRoundKey (at the beginning and the ond of the round) are invertible. …
ddddavidee's user avatar
  • 3,354
3 votes

Variants of AES?

There is book Algebraic Aspects of the Advanced Encryption Standard thats gives a good algebraic description of the AES algorithm. …
ddddavidee's user avatar
  • 3,354
3 votes

Generating a key to use with AES

Yes, the principle to use a common password and a unique salt per file with a key derivation function is a good and acceptable practice, as you generate the salt randomly and with the right size. The …
ddddavidee's user avatar
  • 3,354
3 votes

How secure is AES-256, but with an effective key length of 56-bits?

One needs to have a key with the proper length to use the AES encryption algorithm. … Therefore an AES-256 with a 56-bit effective key length should not be considered as secure. …
ddddavidee's user avatar
  • 3,354
3 votes
Accepted

Making both the IV and salt public for PBE with AES-CFB

In cryptography an Initialisation Vector or IV is an input of fixed size required to randomize the output of a cryptographic primitive. It is not meant to be secret, so there is not problem in make it …
ddddavidee's user avatar
  • 3,354
2 votes

Initialization vector in symmetric-key encryption

No, you can't. A symmetric encryption scheme without a random IV is not sure at all. The scheme is deterministic. from wikipedia: In cryptography, an initialization vector (IV) or starting variable ( …
ddddavidee's user avatar
  • 3,354
2 votes

AES key reuse and guessing the key

Yes, you can encrypt multiple plaintexts with the same key, as you couple AES with a cipher-block mode that allows that. ECB does not allow that. … But using AES-CTR or AES-CBC with a counter or an IV randomly generated allows you to encrypt a lot of data under the same key. …
ddddavidee's user avatar
  • 3,354
2 votes

Multiplicative Inverse in AES

The inverse in AES is defined over a particular field. All the operation are done in this field. The Rijndael finite field is defined as follow: $GF(2^8) = GF(2)[x]/(x^8 + x^4 + x^3 + x + 1)$. … There are several way to implement the inversion and the affine transformation described in the AES to get the final SBox. …
ddddavidee's user avatar
  • 3,354
2 votes

Is it possible to decrypt the 2nd byte of AES-256-CFB-8 ciphertext without decrypting the 1s...

CFB works as a stream cipher, where the random stream is generated encrypting the previous block of ciphertext. Then, the plaintext is just xored with this random generated stream. To decrypt a pa …
ddddavidee's user avatar
  • 3,354
1 vote

Is my protocol that uses hybrid cryptography and AES-GCM secure?

To encrypt a file one draw a random secret ket to be used with AES, he draws also a random IV and a nonce and potentially an AAD. … You use your private key to decrypt the secret key used with AES-GCM and then decrypt the file. In your question you mistaken the use of public and private key. …
ddddavidee's user avatar
  • 3,354

15 30 50 per page