The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

learn more… | top users | synonyms

0
votes
1answer
28 views

Change the preferred algorythm from AES to Camellia in an existing PGP key [duplicate]

I already created a PGP key-pair in Thunderbird Enigmail on Ubuntu. Now I would like to change the key, so it uses preferably Camellia-256 for encryption. How can I change the preferred algorithm ...
3
votes
3answers
161 views

Calculate time taken to break AES key

A 256 bit AES key is required to be broken using the brute force method on a 2GHz computer. How long would it take to break the key in the best case and in the worst case situations? Assume that 1000 ...
-2
votes
1answer
68 views

is encrypted body http secure

I'm working on an embedded project that needs to communicate with a server. Both the server and the device have an AES key pre-installed. I have a network device that provides http services but not ...
-2
votes
1answer
32 views

Sanity check security scheme, is it secure? Is there cruft?

This article: Life in a post-database world: using crypto to avoid DB writes Prompted me to write this url-crypt Node.js module to convert a Secret into secure urlsafe base64 strings. Think of an ...
0
votes
1answer
361 views

Are temporary files an issue when opening and editing an encrypted 7z file?

I am new to security and encryption. I want to store important information like passwords and pin codes so I don't forget them. So far I have been using LastPass but I would prefer a solution I ...
2
votes
2answers
101 views

A secure way to encrypt a connection between 2 clients securing against both passive and active adversaries

Recently I got interested in encryption and the methods behind them. So for a fun / school project I am building a program in python to encrypt data between two clients (chat and files). I'm just ...
2
votes
2answers
94 views

Encrypting USB traffic: Is RSA necessary for AES session key exchange when using pre-installed secret keys?

I need a solution to encrypt USB communication between device A and device B. I was thinking about configuring each device with a secret RSA-2048 key, which would be used to exchange an AES-256 ...
0
votes
0answers
12 views

What ciphers do I need to disable in tomcat to match a specific apache conf? [migrated]

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
3
votes
2answers
274 views

Is AES encryption vulnerable?

I was reading weaknesses in AES encryption. Unfortunately, I have a website that uses AES: Its database is almost entirely AES encrypted. Is there a real threat? Would it be worth to refactor the web ...
3
votes
2answers
121 views

Are credit card number look ups more secure with a hash function than with a deterministic encryption algorithm?

I understand PCI DSS 3.0 allows hashes of cardnumbers to be stored separately from encrypted values, but I'm startled at the efficiency of tools like hashcat in discovering card numbers from hashed ...
5
votes
0answers
62 views

AES encryption on embedded device: Can this be secure?

I plan to create an encryption program for an embedded device with the following characteristics: CPU is Intel 80186 compatible @ ~20 MHz 128 KB RAM, of which I have ~20 KB at my disposal for ...
1
vote
1answer
55 views

Is it possible to prevent an attacker from capturing my WI-FI handshake on WPA-2 AES?

For quite a while I've been experimentally hacking wireless routers by capturing handshakes and Decrypting them using oclHashcat on my computer. even the most complicated passwords won't take longer ...
3
votes
2answers
122 views

What is the point of AES key wrap (with JSON Web Encryption)?

I'm looking at JSON Web Encryption (JWE) and am left a bit confused about why you would use AES key wrapping. The document even talks about using matching key algorithm strengths: Algorithms of ...
0
votes
0answers
12 views

Bouncy Castle AES-GCM mode vs OpenSSL AES-GCM? [migrated]

I am trying to do some research on AES-GCM. I am trying to encrypt some data using Bouncy Castle's AES-GCM algorithm implementation and then decrypt it using openSSL's AES-GCM, but I couldn't. I ...
1
vote
1answer
32 views

What is the benefit of adding data encrypting key then store it (encrypted) along with data

To protect user's sensitive data, I am considering the following 2 approaches: Create 1 data encrypting key (DEK) for each user, use it to encrypt (using AES CBC mode with a random IV for each ...
-3
votes
1answer
62 views

AES 256 bit key to plaintext conversion? [closed]

I'm a little rusty on cryptography, but I have successfully acquired a 256 bit key that is used for encryption and I want to know if it is possible to reverse it into its corresponding plain text ...
-1
votes
1answer
45 views

Undelete-secure AES software and software for carrying out “full undeletion” free-partition-space zeroing/reformatting on Windows?

It is fairly well known that on Windows, when you delete a file (or folder which may contain any number of files and subfolders possibly containing other files and subfolders and so on), Windows just ...
0
votes
1answer
90 views

Using AES in CTR for TCP/IP based network connections - need to encrypt the IVs?

For AES based encryption on TCP/IP connections, I am guessing I have to do the following: Have the 2 parties share a common key, assuming I am doing AES-128 then a sequence of 16 bytes. Ideally the ...
1
vote
2answers
212 views

Understanding Java Security Providers

I'm hoping to use the below issue we came across recently to better understand Java's security providers, ciphers and encryption in general. We got the following error during an SSL Handshake (using ...
3
votes
1answer
54 views

Do I have to use an IV when using GPG with AES 256?

Do I have to use an IV when using GPG with AES 256? Or does GPG handle that for me? I've noticed that I get different results each time I run the encryption, i.e. gpg --symmetric --cipher-algo ...
0
votes
1answer
48 views

SSL over self-implemantation of RSA?

I currently write a client application which communicates with a PHP server. The application itself requires valid user credentials and get all of his information by doing POST requests to the PHP ...
4
votes
1answer
157 views

Keyboards using 2.4GHz with AES

I got a Microsoft Sculpt keyboard, as it seems to be a small improvement over the much loved Ergo 4000. (What I'd give to have an Ergo 4000 with CheryMX Blues...) On various sites, they have this one ...
0
votes
1answer
37 views

Extract a key from an AES black-box?

I'm trying to figure out how a given executable works. I know it's using AES-128 to encrypt and decrypt, but the specifics of the code are unknown. I can get the executable to encrypt and decrypt any ...
1
vote
1answer
63 views

Encrypting files securely using user supplied password

I'm currently trying to build a (sort of) secure, desktop based RTF text editor written for node-webkit using node.js. Based on some answers that I read here, such as How can I securely convert a ...
1
vote
1answer
70 views

Is it safe to combine AES with TLS?

Given that two clients want to sync data through a server, is it safe to use AES to encrypt the data and TLS to communicate with the server? Assumptions: Server has never access to unencrypted data ...
12
votes
2answers
10k views

Recommended options for LUKS (cryptsetup)

I'm looking for recommended options for cryptsetup to create fully encrypted SSD (SanDisk SSD U100 128GB), which achive: Timing O_DIRECT disk reads: 1476 MB in 3.00 seconds = 491.81 MB/sec Timing ...
0
votes
0answers
30 views

AES and message properties

An active attacker changes the ciphertext which was made using the AES cipher algorithm. Which message properties are preserved even though that change was made. Choose one of the below: 1) Integrity ...
1
vote
1answer
64 views

HMAC + AES to guarantee secrecy and integrity?

As an exercise, I am writing some code that accepts a list of possibly secret properties (e.g. user ID, password, IP address), adds a timestamp, encrypts it, and signs it. Here's a high-level ...
0
votes
0answers
39 views

Cryptographic Testing

Given an algorithm (say, AES), how to create/generate test vectors? I have tried using the NIST test vectors for AES and found it to be working fine with a package of "chilkat". Suppose, for a ...
3
votes
1answer
51 views

What encryption and signature systems (don't?) allow for plausible deniability of the OP's key being used?

I need to prevent Mallory from blindly matching encryption and signing keys to messages Hypothetical scenario: A user creates a public key An encrypted or signed payload exists. With only public ...
2
votes
2answers
195 views

How easy is it to crack gpg with private key, but without password

I was wondering if an adversary have your private gpg key but not the password/phrase, how easy/difficult would it be to crack a encrypted file compared to a encryption that only use password and not ...
2
votes
2answers
310 views

PGP as method of sharing AES key?

Would PGP work as a method of sharing the AES key, as shown below, and what would be the flaws with this method of encryption? Server sends PGP public key Client generates (uses as AES key for ...
8
votes
3answers
1k views

Does the entire AES encrypted dataset have to be present to be 'cracked'?

I am implementing an AES 256 algorithm on credit cards and I am wondering if I would be strengthening or weakening the encrypted dataset if I split the dataset and persisted it in two locations. I ...
0
votes
0answers
136 views

Gladman's file encryption library = AES in counter mode with HMAC-SHA1 authentication?

I would like to use Gladman's algorithm to create AES encrypted data in JavaScript. I use the Crypto-JS library, but its performance is horrible. PBKDF2 is terribly slow, so I switched to another ...
1
vote
0answers
79 views

Why do we need salt and RFC in generating AES encrypted message

I'm not very familiar with encryption and new to this, I'm just learning it right now by code review of one of the class we have in an application to encrypt a password using AES. Would anyone explain ...
13
votes
4answers
7k views

Is “Why Should You Avoid AES In MySQL?” true?

From a 2012 Smashing Magazine article quite a bold statement is made to avoid AES in MySQL itself. Or as they put it "Why Should You Avoid AES In MySQL?". However, if you search for SQL encryption, ...
3
votes
1answer
927 views

Salt usage for Spring security?

I use the Spring security for Java web applications and I have written an authentication provider which is working without salt and now I want to either add salt or alternatively use the built-in ...
5
votes
5answers
9k views

RSA maximum bytes to encrypt, comparison to AES in terms of security?

What is the maximum number of bytes for encrypting a plaintext message using RSA that is reasonably secure and also efficient and would AES be better for the same size in bytes? The encryption doesn't ...
0
votes
1answer
153 views

How come PBEWITHSHA256AND128BITAES-CBC-BC violates the 128bit key limit?

In my Java application (which use StandardPBEStringEncryptor by jasypt), when i use the PBEWITHSHA256AND128BITAES-CBC-BC algorithm instead of something weaker such as PBEWithMD5AndDES, i get an ...
1
vote
2answers
82 views

Storing AES password for verification

I was wondering if such practice would be safe: I have a table that stores encrypted notes Every note has a data field and a password field When a password is entered, i want to select all notes, ...
0
votes
1answer
84 views

Is there an AES 256 LUKS encryption option in Fedora? [closed]

I have certain information on my drive that I don't want anyone (not even me ;) ) to gain access to. I read recently that Fedora only offers EAS 256 LUKS encryption. This just isn't secure enough ...
1
vote
1answer
157 views

Real time application of AES and DES [closed]

I am writing a paper on reducing the power consumption of security protocols. I am having trouble identifying sources that describe real-time usage of DES and AES, and how often they are used. I plan ...
0
votes
1answer
440 views

AES 128bit decryption using a key longer than 16 bytes

I got a little problem regarding AES decryption. I have to decrypt some text that has been encrypted using 128bit AES / ECB with PHP mcrypt. The thing is, the key that is being used to encrypt/decrypt ...
1
vote
2answers
177 views

File encryption for a storage API

I'm implementing a Dropbox-like API, and one of my requirements is to have the files stored encrypted on the server. It is not required that the files are made unreadable by the server, only that they ...
3
votes
1answer
103 views

Encryption and HMAC with the same password

I need to send authenticated ciphered messages by using a single password. Reusing the same (derived) key for the block cipher and the HMAC is not a good practice, I know. My initial idea is to ...
0
votes
2answers
89 views

Should I use HMAC in this situation

I need to store a big message encrypted on a server. What I am about to do is: Encrypt the message with a AES key; (Authentication) Hash the message with SHA512 and encrypt the hash with RSA priv ...
3
votes
1answer
172 views

Is it a good idea to do double AES encryption with 2 different keys, when one is held by the user and one stored on the server?

I'm building a web app. The app needs to keep certain data within the database very secure. Please assume for the moment that I don't have a HSM or Key-Management facility and can't afford to ...
2
votes
2answers
263 views

Steps for building a good File Encryption on Android

I want to be able to build a good file encryption on android for a cloud app. The files used are mainly pdfs, pngs, docs, audio, video, etc (all sorts of files). Edit: My constrains are that it ...
0
votes
1answer
829 views

Cracking Kingston DataTraveler vault privacy - is it possible?

I have Kingston DataTraveler vault privacy USB flash drive (DTVP/2GB). Here is tech specs. Flash drive has a 256-bit AES hardware based encryption. My flash has password protected and I do not know ...
1
vote
1answer
115 views

Hardware Implementation of Encryption Algorithm

In the abstract of the AES-GCM RFC, the following passage is prominently included: [AES-GCM] can be efficiently implemented in hardware for speeds of 10 gigabits per second and above... Is the ...