The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

learn more… | top users | synonyms

2
votes
1answer
545 views

How to implement encrytion/decryption system using IV between mobile app and web service

In my app we are going to send encrypted data to the web service. I am using the following code to encrypt and decrypt the data - public class DecEn { private static final String password = ...
2
votes
1answer
189 views

Is it insecure to provide a hash of an AES password?

I have made some software that encrypts and decrypts files using AES. I was wondering if it is safe to write a hash of the password to the file so that the program can check if a password is correct. ...
2
votes
0answers
86 views

A simple HMAC question

Suppose I use a key (and IV) to encrypt a piece of binary data with AES-256-CBC to produce the corresponding encrypted data. Suppose I then throw this encrypted data into HMAC-SHA512 using the same ...
1
vote
1answer
746 views

How to prepare FATCA data transmission files with open source tools [closed]

Here is the context: to transmit FATCA data to US IRS service the IDES protocol defines the following steps sign the XML Payload.xml file with enveloping signature, SHA-256 with RSA private key, as ...
1
vote
1answer
99 views

Why FATCA IDES “protocol” does not use RSA encrytion directly on Zip archive ?

Here is the context: to transmit FATCA data to US IRS service the IDES protocol defines the following steps sign the XML Payload.xml file with enveloping signature, SHA-256 with RSA private key, as ...
4
votes
2answers
742 views

How do cryptographic algorithms help hackers to bypass Antivirus software?

I was wondering how do hackers use cryptography for bypassing antivirus software. I don't have some deep understanding on how antivirus software works, but I know that every antivirus has base of ...
2
votes
0answers
51 views

Security implications of providing an encryption/decryption oracle

I need to provide a service that acts as a symetric encryption/decryption blackbox : the box get a secret key k users send datas d, and get ciphertext c = Encrypt(d,k) users send ciphertext c, and ...
2
votes
1answer
119 views

Aes encryption algorithm life time [closed]

How many years from now will we stop using aes encryption algorithm, as of now aes seems to be virtually immune to brute force attacks and not showing any weaknesses, will quantum or optical computing ...
0
votes
1answer
125 views

Is it secure to not expire keys in symmetric encryption?

Note that this question describe hypothetical case, that is never meant to be used in real world. Server communicates with clients with message structure: client_id, initialization_vector, encrypted ...
-3
votes
2answers
108 views

AES algorithm encryption time

What is the time taken by an AES Encryption algorithm, with a key of 128 bits, operating on a normal computer (say with Intel i7) and what will be the impact be on the time if I wish to use a 256 bit ...
0
votes
1answer
223 views

Which one will give me the best VPN security when choosing Encryption algorithm in pfsense?

I want to setup an VPN server in pfsense and I can choose a lot of Encryption algorithm types ,alot!! What I have read is that the AES 256 (512 is not an option) is the best. Well even then there are ...
5
votes
3answers
6k views

Encrypting using AES-256, can I use 256 bits IV?

I want to encrypt data using AES in java, and I want to intialize the cipher with Initialisation Vector. Can I use 256-bits IV ? Or I must use only 128-bits IV ?
1
vote
0answers
92 views

How can I use session salt for encrypting data using AES in CTR mode?

I have to implement a crypto-plugin in Java. The approach followed is conceptually similar to that used for SRTP. The algorithm used for data confidentiality is AES in CTR mode (I'm following a ...
2
votes
1answer
65 views

Does endianness affect encryption keys and initialization vectors?

When encrypting (specifically when using AES) content, will endianness affect how the key (and/or initialization vector) should look when encrypting/decrypting content? And could this depend on the ...
2
votes
3answers
6k views

Is Aescrypt a valid tool for encryption or not?

I'd like to know if Aescrypt is a valid tool, or if for a very secure protection, the only choice is to use a software like gpg, or similar. More I've another curiosity, if one doesn't want to use ...
1
vote
1answer
228 views

AES subkey generation operations order

I am preparing for my Information Security state exam. There is a question in preparation sheet that asks about order of operations to generate subkey for AES algorithm. Operations listed: XOR with ...
12
votes
3answers
19k views

Key size difference between AES and RSA

Can I say that 128 bit using AES provide more security than 1024 using RSA?
3
votes
1answer
72 views

How can the parallelization in CTR mode be attained?

I am using CTR mode to encrypt/decrypt files. Theoretically CTR mode is faster than CFB or CBC because of its individual operations on blocks. In my case CTR mode takes almost as long as CFB. How can ...
15
votes
2answers
3k views

Does AES-192 provide better encryption than AES-256?

this wikipedia article describing AES says: Related-key attacks can break AES-192 and AES-256 with complexities 2^176 and 2^99.5, respectively. Does this mean that AES-256 is actually a weaker ...
-2
votes
1answer
91 views

How to protect data at rest in a php application?

I was wondering which is the best way to secure data at rest (encrypt / decrypt) in a php application ( eq: stored in a database ) using AES ? Where is the best way to store the keys ?
2
votes
1answer
3k views

Using AES as a Stream Cipher

I need to send a lot of small messages that are usually between 128 bits and 256 bits long, and each message is encrypted with a separate 128 bit AES key. Therefore, to send each message with the key ...
-2
votes
1answer
197 views

What is encryption by RSA with AES? [duplicate]

By visiting some websites, like bank websites, we can see for example: TLS_DHE_RSA_WITH_AES_128_CBS_SHA, 128 bits, TLS 1.0 I would like to know: What does mean CBC? TLS 1.0 is an old version, is ...
0
votes
2answers
227 views

Would AES encryption of a small number of blocks be less secure than encrypting a large, fixed-size padded buffer?

My application encrypts a file with AES, and the data is read, encrypted and written with a buffer. It's size is defined with a BUF_SIZE value, which is constant. I will try to explain my question ...
5
votes
3answers
231 views

Secure Hash of a very short payload - is it possible?

I am looking to verify the integrity of a very small payload, approx 64 bytes, which will be stored in a QR code. I need to verify that the payload has not been generated or altered by an attacker. ...
3
votes
3answers
386 views

Are credit card number look ups more secure with a hash function than with a deterministic encryption algorithm?

I understand PCI DSS 3.0 allows hashes of cardnumbers to be stored separately from encrypted values, but I'm startled at the efficiency of tools like hashcat in discovering card numbers from hashed ...
1
vote
1answer
487 views

Does AES 256 encryption support a master key and generated (time-bombed) keys?

I have a scenario where semi-sensitive [1] data for a corporate web application is to be stored in the browser's localized storage (Indexed DB to be specific, via JavaScript). The intention is to ...
3
votes
2answers
124 views

Consequences of putting a serial number into an AES key

I have an embedded device with a secure memory of only 128 bits. I have to store the serial number (16 bits) and the AES key (128 bits) into this space. What are the consequences of putting the 16 ...
-1
votes
3answers
351 views

If TLS 1.2 is considered unbreakable, why do the NSA and other agencies invest in supercomputers? [closed]

If a 2048-bit RSA key and a 256-bit AES key are considered to be unbreakable within the foreseeable future by any kind of computer, why do the NSA and other intelligence agencies invest in ...
4
votes
5answers
513 views

A secure way to encrypt a connection between 2 clients securing against both passive and active adversaries

Recently I got interested in encryption and the methods behind them. So for a fun / school project I am building a program in python to encrypt data between two clients (chat and files). I'm just ...
1
vote
2answers
196 views

Encrypting user credentials using AES: how to hide the key

One of my software (an R package) has to save on disk users sensitive information. I encrypt such information using AES encryption using a random key that is generated at the moment of installation ...
3
votes
0answers
453 views

How does Silverlight protect the AES keys it gets from PlayReady? [closed]

I'm doing some research about how Silverlight protects AES keys. Here is the scenario: There is a smooth stream live encrypted channel service. When i log in to the service and tune the channel, ...
0
votes
0answers
179 views

Cryptographic Testing

Given an algorithm (say, AES), how to create/generate test vectors? I have tried using the NIST test vectors for AES and found it to be working fine with a package of "chilkat". Suppose, for a ...
0
votes
1answer
3k views

Cracking Kingston DataTraveler vault privacy - is it possible?

I have Kingston DataTraveler vault privacy USB flash drive (DTVP/2GB). Here is tech specs. Flash drive has a 256-bit AES hardware based encryption. My flash has password protected and I do not know ...
2
votes
1answer
341 views

OpenSSL implemented AES not according to NIST?

I have been using the Encryption/Decryption code from https://wiki.openssl.org/index.php/EVP_Symmetric_Encryption_and_Decryption. The NIST test vectors (http://csrc.nist.gov/groups/STM/cavp/) for AES ...
7
votes
1answer
2k views

OpenSSL fails NIST AES-128-ECB test vectors?

I'm having trouble getting OpenSSL's ciphertext to match the NIST test vectors. Example : in "ecb_e_m.txt" from http://csrc.nist.gov/archive/aes/rijndael/rijndael-vals.zip, the first test is (in hex) ...
2
votes
0answers
125 views

Hiding symmetric key inside encrypted data

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
2
votes
1answer
324 views

VeraCrypt secure in public?

I have made a Veracrypt Containment that uses AES to encrypt everything inside. But my question is: can I securely put the containment file in public (everybody can access it) without anybody able to ...
-1
votes
1answer
582 views

AES or Serpent-Twofish-AES [closed]

I want to encrypt my private stuff like credit cards, money, RSA private keys (and so on) but I don't know if I should use AES-256 only or in combo like Serpent-Twofish-AES (I am using Veracrypt). ...
0
votes
3answers
1k views

Is it possible to wrap and export RSA private key in FIPS 140-2 Level 3 compliant hardware?

I would like to do the following on FIPS 140-3 Level 3 certified cryptographic token using PKCS#11: Generate RSA key pair on token Import AES key from multiple components Wrap and export RSA private ...
0
votes
1answer
66 views

How Secure is my Application?

I have created a little application in .NET that serves as a loader for my other applications. Essentially, when opened, this app will get a list of available applications, and when an option is ...
1
vote
0answers
38 views

Are there “standard” formats for storing GCM output?

The openssl enc -aes-256-gcm command is broken, because it can't decrypt its own output, otherwise I would look to that as a format. In order to decrypt a file, code needs to be able to separate the ...
0
votes
1answer
133 views

Encyption Key Storage and floating point encryption

I am working on a web application where I need to encrypt some fields based on user configuration and display the decrypted information. The field values can be text or integers or floats. We are ...
9
votes
2answers
606 views

AES encryption on embedded device: Can this be secure?

I plan to create an encryption program for an embedded device with the following characteristics: CPU is Intel 80186 compatible @ ~20 MHz 128 KB RAM, of which I have ~20 KB at my disposal for ...
1
vote
1answer
129 views

Simple open-source file encryption tool

I want to securely encrypt files, with an open algorithm. So, i've constructed the simple openSSL shell command. How secure is it? function aes-enc() { openssl enc -aes-256-cbc -e -in $1 -out ...
0
votes
1answer
561 views

rainbow table for AES 256 CBC knowing IV, cipher text and plain text

I'm in a situation where I know that I have to decrypt a file encrypted using AES 256 CBC and I've the following details: I know the first 16 bytes block in plain text I know the IV (static 128 bit ...
3
votes
1answer
3k views

Creating a private key with OpenSSL and encrypting it with AES GCM

My goal was to create a private key and to encrypt it with a strong cipher. That key would be used as a root certificate for an internal Certification Authority. However, eventhough openssl supports ...
2
votes
0answers
193 views

How is Tresorit client-side encryption key stored and managed?

I am using Tresorit on Mac OS X and iPhone. When I am using it there is always applied client-side encryption before posting the file to cloud. The key used for encryption is AES-256 and CFB mode of ...
1
vote
1answer
226 views

How strong is the performance impact of signing when using RSA_AES_256_ECDH

To encrypt web communication, I use SSL with a RSA key with a length of 2048 bit, AES key's with a length of 256 bit and the ECDH-algorithm for the negotiation of the AES key's (or to exchange the ...
2
votes
0answers
46 views

CCM instead of key wrap

Is there any instance of NIST or other encryption standards using AES-CCM to encrypt/authenticate key data? I would like to use CCM over a keywrap function, but cannot find any precedent for this in ...
3
votes
1answer
163 views

Do I have to use an IV when using GPG with AES 256?

Do I have to use an IV when using GPG with AES 256? Or does GPG handle that for me? I've noticed that I get different results each time I run the encryption, i.e. gpg --symmetric --cipher-algo ...