23
votes
Accepted
What encryption should I use: Blowfish, Twofish, or Threefish?
TL;DR: Twofish and Threefish are fine.
It is not the best idea to have the cipher you want to use hardcoded because you can't upgrade easily when one of them is broken. to quote mikeazo in the ...
- 10k
10
votes
What encryption should I use: Blowfish, Twofish, or Threefish?
If you want to choose a fishy cipher by Bruce et al, I'd go for Twofish.
Reason:
Blowfish is not recommended anymore because of the small block size of 64 bits, among others. Even Bruce is not ...
- 94.5k
10
votes
Accepted
Is it true that Serpent and twofish are much stronger than AES?
SHORT: This is kind of true. However, things are bit different now. Better protection against brute force is inaccurate claim.
At the time Rijndael (AES) won the competition, it was faster, and ...
- 5,369
9
votes
Accepted
Is there a real purpose to use Twofish, Serpent or Threefish instead of AES?
Serpent is straightforward to implement with side-channel resistance due to the bit-sliced design. Because AES incorporates an S-Box that is most simply implemented as a lookup table, implementations ...
- 19.9k
9
votes
Accepted
how secure is Twofish really?
So I heard that Twofish is much more secure than AES, because it is not vulnerable to bruteforce and only supports 256 bit .
Neither AES nor Twofish is vulnerable to brute force attack on the key in ...
- 19.9k
8
votes
Twofish fails Dieharder test
When would-be pseudorandom data fails a randomness test, the reasons are of the following kinds (from most to least common in my experience)
The data is generated by a method not supposed to yield ...
- 145k
8
votes
Accepted
AES vs other types of encryption such as Twofish
Rijndael (aka AES) and Twofish were both candidates and finalists for the Advanced Encryption Standard contest, a three year selection process which yielded the selection of Rijndael as the standard.
...
- 819
5
votes
Accepted
How secure is AES in a critical situation?
In practice, because they will target the easiest/weakest/least expensive link in the chain, they would attack you.
It is infinitely easier to threaten to crack someone's kneecaps to obtain their ...
- 19.9k
5
votes
Accepted
can a weak cipher in a cascade weaken the result?
I'm tailoring my question specifically to VeraCrypt where needed.
So if We have AES(Twofish)) with the key : Test-password123 The
"Test-pass" Part would be used for AES and the "word123" part gor
...
- 46.4k
5
votes
Is it true that Serpent and twofish are much stronger than AES?
Here are quotes from Cryptography Engineering: Design Principles and Practical Applications (Niels Ferguson, Bruce Schneier, Tadayoshi Kohno) :
Serpent [...] is built like a tank. Easily the most ...
- 151
4
votes
Is it true that Serpent and twofish are much stronger than AES?
No, there is no mathematical proof to conclusively prove that Serpent and Twofish are stronger. The newer processors (intel, AMD, and even processors used in phones) have hardware instructions for AES,...
- 293
4
votes
Why did Rijndael become the AES Standard . What is wrong with Twofish and Serpent?
Welcome to the site! I'll try and give the general answer you're looking for:
When NIST ran the AES competition in 1997 - 2000 to select the best symmetric cipher, they were looking for an algorithm ...
- 3,687
3
votes
OpenSSL supports AES, Camellia, ChaCha. How about Twofish, Threefish, Serpent?
AES is the main block cipher in use today, standardized by NIST. Camellia is a Japanese standardized cipher. ChaCha is a fast stream cipher specified by Bernstein and incorporated into TLS with ...
- 94.5k
3
votes
Is it possible to identify a Serpent encryption key in memory?
Yes, Serpent also does a deterministic well-known key expansion. So it should be possible to identify the sub keys in memory. You will want to know what implementation you are looking for since there ...
- 12k
3
votes
Is there a real purpose to use Twofish, Serpent or Threefish instead of AES?
In most cases, you should probably use AES, especially if there is hardware support.
In some cases, it might make sense to use one of the others. For example, the simplicity of Threefish would make ...
3
votes
Accepted
Cryptographic algorithms compromised and alternatives?
Should you pick AES, Twofish, AES(Twofish) or Twofish(AES)?
You should pick AES.
Also if you should choose Twofish, is it post-quantum computer
algorithm proof?
There's no current publicly ...
- 46.4k
2
votes
CSPRNG made out of Block Cipher running in CTR Mode?
If CSPRNG is constructed out of AES in CTR Mode, does it satisfy 2nd characteristic? i.e Compromise of internal state will not lead to reconstruction of prior stream of random numbers?
No, assuming ...
- 13.2k
2
votes
CSPRNG made out of Block Cipher running in CTR Mode?
This is an incorrect definition of CSPRNG and is misleading for people on this website. Forward security is an additional property that may be desirable, but this is certainly not the standard notion. ...
- 28.2k
2
votes
Is it possible to identify a Serpent encryption key in memory?
Yes, it would be possible to identify Serpent or Twofish keys from round keys in memory, which are likely to exist in a software-only implementation optimized for speed (but not in hypothetical ...
- 145k
1
vote
Accepted
Is this cumbersome strategy to produce a ridiculously strong password valid?
This is a broadly sub-optimal strategy because it violates Kerckhoffs's principle: if the attacker knows as much about the steps you're describing as you do, and only lacks the core secret, then most ...
- 233
1
vote
How does Twofish avoid weak keys if it uses key-dependent S-boxes?
The key to the answer lies within these two snippets:-
These results
help confirm our belief that, from a statistical standpoint,
the Twofish S-box sets behave largely like a
randomly chosen ...
- 15.7k
1
vote
Accepted
How secure is a system that retrieves encrypted private keys from a public database?
A user's private keys are encrypted using the user's password, and stored in a publicly accessible database.
A publicly accessible database like this can be easily corrupted through an offline ...
- 2,755
1
vote
Twofish fails Dieharder test
There is another possible hypothesis...
The tests are buggy. That's an alternative hypothesis acknowledged in the dieharder documentations, as:-
Even small errors in test statistics permit the ...
- 15.7k
1
vote
Twofish fails Dieharder test
In light of the rewind problem, it might be useful to do a run of unlimited length against /dev/urandom which didn't fail any tests. What follows is the output of dieharder free running and sucking up ...
- 15.7k
1
vote
Block Ciphers with encryption speed similar to AES
Although one would like to think that AES-NI can speed up Camellia because the s-box structure is shared, there are differences because of the fact that Camellia is a Feistel-Network structure. AES-...
- 4,948
1
vote
Accepted
How is Twofish flattening the result of Reed-Solomon MDS matrix multiplication into a 32-bit result?
In crypto diffusion layer design the MDS matrix is usually used in the following form:
$$ X_{n+1}=M X_n,$$
where the actual codewords are $(X_n | X_{n+1}).$ So it's a rate $1/2$ MDS code. It need ...
- 23.7k
1
vote
CSPRNG made out of Block Cipher running in CTR Mode?
Depends if you consider the key to be part of the inner state. If you do then no, otherwise yes. On the one hand it is certainly part of the data structures in memory, on the other hand it doesn't ...
- 94.5k
1
vote
Key strenth in Cipher cascades (Veracrypt)
What you would do in such a case is take a master key (which could be derived from a password) of a certain length (in your cases probably 128 or 256 bit long) and use a key derivation function (like ...
- 2,548
1
vote
can a weak cipher in a cascade weaken the result?
It depends.
Are the keys related? If they are, it is hard to reason about it in general. If they are not, you can continue.
Well, what “related” means? I am not sure if there is a good definition. ...
- 631
1
vote
Twofish MDS multiplication
Each byte act as a polynomial in $\operatorname{GF}(2^8)$
You will multiply the elements of the matrix in (Galois Field) $\operatorname{GF}(2^8)$ and add them in $\operatorname{GF}(2^8)$
here is a ...
Only top scored, non community-wiki answers of a minimum length are eligible