Skip to main content

New answers tagged

0 votes

Are all vulnerabilities of stream cipher been found?

Not, exactly different from what is already discovered but rather an improvement. According to previous discoveries a 12 or 13 byte sequence plaintext is required to rebuild the internal state but ...
terry franklin's user avatar
1 vote
Accepted

Why reverse the KEY and IV before loading into the state in Trivium cipher?

The reversal is likely required because of the difference in endianness. The title of the repo reads "Trivium (Little Endian)". So if the cipher is defined using numbers or a specific byte ...
Maarten Bodewes's user avatar
  • 94.5k
1 vote
Accepted

Using shortened key for Chacha20

Since self-answers are encouraged, I have recently found a document by Bernstein that confirms its safe to zero pad shorter keys to larger sizes for salsa20 (since chacha is a natural upgrade to salsa ...
DerekKnowles's user avatar
1 vote

Using shortened key for Chacha20

Surely. The constant words - i.e. words 0-3 are magic numbers that correspond to the byte string expand 32-byte k. You can change 32 to 16 and repeat the 128-bit ...
DannyNiu's user avatar
  • 9,795
0 votes

Using shortened key for Chacha20

Jump to the bolded "OTOH" if you want my recommendation on how to use a 192 bit key. Assuming that the underlying PRF is secure(not quite true under all scenarios depending on modifications, ...
oaky_0ffc's user avatar
0 votes
Accepted

Is known plaintext attack on Zipcrypto still possible using BK94 algorithm?

Yes, Plaintext attack is always possible on Zip Crypto and now it turns out that only 6 plaintext bytes are required when working on CPU and 3 bytes on GPU. In a few months, i think you will only need ...
terry franklin's user avatar

Top 50 recent answers are included