New answers tagged stream-cipher
0
votes
Are all vulnerabilities of stream cipher been found?
Not, exactly different from what is already discovered but rather an improvement.
According to previous discoveries a 12 or 13 byte sequence plaintext is required to rebuild the internal state but ...
1
vote
Accepted
Why reverse the KEY and IV before loading into the state in Trivium cipher?
The reversal is likely required because of the difference in endianness. The title of the repo reads "Trivium (Little Endian)". So if the cipher is defined using numbers or a specific byte ...
1
vote
Accepted
Using shortened key for Chacha20
Since self-answers are encouraged, I have recently found a document by Bernstein that confirms its safe to zero pad shorter keys to larger sizes for salsa20 (since chacha is a natural upgrade to salsa ...
1
vote
Using shortened key for Chacha20
Surely. The constant words - i.e. words 0-3 are magic numbers that correspond to the byte string expand 32-byte k. You can change 32 to 16 and repeat the 128-bit ...
0
votes
Using shortened key for Chacha20
Jump to the bolded "OTOH" if you want my recommendation on how to use a 192 bit key.
Assuming that the underlying PRF is secure(not quite true under all scenarios depending on modifications, ...
0
votes
Accepted
Is known plaintext attack on Zipcrypto still possible using BK94 algorithm?
Yes, Plaintext attack is always possible on Zip Crypto and now it turns out that only 6 plaintext bytes are required when working on CPU and 3 bytes on GPU.
In a few months, i think you will only need ...
Top 50 recent answers are included
Related Tags
stream-cipher × 552encryption × 123
block-cipher × 79
lfsr × 48
chacha × 45
cryptanalysis × 40
aes × 39
algorithm-design × 39
random-number-generator × 35
symmetric × 31
salsa20 × 29
pseudo-random-generator × 28
one-time-pad × 27
xor × 27
hash × 26
rc4 × 24
authenticated-encryption × 22
modes-of-operation × 18
initialization-vector × 16
keys × 15
ctr × 15
mac × 14
nonce × 12
provable-security × 11
attack × 10