The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

learn more… | top users | synonyms

3
votes
2answers
95 views

How can I create a secure random key for AES?

I need to generate a lot of shared keys for an AES method which uses in various condition, my concern is how can I generate unpredictable keys? I've had some research on Cryptographically secure ...
3
votes
2answers
293 views

Is it possible to construct a specific AES collision?

Suppose I have a plaintext message P, and I encrypt it using key K to get ciphertext C. It's trivial to find a different plaintext message P' and a key K' so that the encryption results in C: just ...
3
votes
2answers
653 views

AES CBC over TCP - when is new IV needed

I am working on a project where two devices will be communicating with AES with CBC over TCP. We already have a secure mechanism for sharing the encryption/decryption key. I am not sure if we need to ...
3
votes
1answer
453 views

Hybrid key management doing it wrong?

I'm currently working on a project that needs be as secure as possible key-management. My experience with encryption, decryption and key-management are none whatsoever so i did some research on the ...
3
votes
1answer
189 views

Encrypting files securely using user supplied password

I'm currently trying to build a (sort of) secure, desktop based RTF text editor written for node-webkit using node.js. Based on some answers that I read here, such as How can I securely convert a &...
3
votes
2answers
1k views

Using AES to encrypt user data

I know next to nothing about cryptography, and I'm basically just looking for someone to look over what I'm doing and tell me if I'm screwing up. I have the user entering in some sensitive ...
3
votes
3answers
2k views

SSL vs Encryption

I am working on creating an android mobile application which needs to connect to a server from time to time. The application makes use of sensitive data which I would not like to get into the wrong ...
3
votes
1answer
2k views

Can active attacks really decrypt a particular AES-256, CBC, PKCS#7 encrypted file?

I recently found out that active attacks are a threat against AES-256, CBC mode, padded with PKCS#7 (the CBC mode in particular. I should supposedly change to EAX to guard against these attacks). ...
3
votes
1answer
2k views

static IV and random keys using aes-256-cbc

Are there any security risks in using a static IV if I generate a new random KEY for each set of data to encrypt? If I understand correctly what the purpose of the IV is in Cipher-block chaining mode ...
3
votes
1answer
51 views

How can AES-CBC be used for LUKS encryption, when the ciphertext is not static?

In CBC mode of operation, ciphertext from previous block is used as IV in next block. How then can AES-CBC be used for disk encryption (LUKS), when the data on the disk (ie the ciphertext) keeps ...
3
votes
1answer
350 views

VeraCrypt secure in public?

I have made a Veracrypt Containment that uses AES to encrypt everything inside. But my question is: can I securely put the containment file in public (everybody can access it) without anybody able to ...
3
votes
3answers
395 views

Are credit card number look ups more secure with a hash function than with a deterministic encryption algorithm?

I understand PCI DSS 3.0 allows hashes of cardnumbers to be stored separately from encrypted values, but I'm startled at the efficiency of tools like hashcat in discovering card numbers from hashed ...
3
votes
1answer
200 views

Encryption and HMAC with the same password

I need to send authenticated ciphered messages by using a single password. Reusing the same (derived) key for the block cipher and the HMAC is not a good practice, I know. My initial idea is to ...
3
votes
1answer
249 views

Do we have to take algorithm substitution attacks seriously?

Bruce Schneier's blog drew my attention to algorithm substitution attacks which may leak symmetric keys through IV or padding or other covert channels, encrypted with escrow keys. The major premise is ...
3
votes
2answers
1k views

Is AES encryption vulnerable?

I was reading weaknesses in AES encryption. Unfortunately, I have a website that uses AES: Its database is almost entirely AES encrypted. Is there a real threat? Would it be worth to refactor the web ...
3
votes
1answer
3k views

Weakness of AES OFB mode

I found these comments regarding AES OFB Mode "This mode is a slightly less common mode, quite similar to CFB above, but which should not be used as a stream cipher due to inherent weaknesses when the ...
3
votes
1answer
4k views

aes cfb 128 decryption /encryption problem between Erlang and PHP

Update 2 - it works Thanks to Tom Leek for his answer. The CFB mode of mycrypt for Rijndael uses a 8-bit feedback loop and not a feedback loop the length of the key/iv. You have to force it to use ...
3
votes
1answer
102 views

How can I mitigate against chosen plaintext attacks for AES ECB?

I am developing on a platform where my only encryption option uses AES ECB. The encryption is used to protect parameters that the user can set, and so it susceptible to a chosen plaintext attack. It'...
3
votes
1answer
135 views

Is rounds in a cryptography algorithm same as iterating the algorithm?

In a cryptography algorithm such as AES or DES, does the number of rounds mean same as iterating the algorithm? Example: c= "plaintext"; for(int i=0;i<5; i++) { c = AES(c , "key"); } Where c ...
3
votes
1answer
194 views

IV Reverse AES-256-CBC PKCS#7

I'm a freshmen in cryptography and want to know more about IV reversing. There's a lot of posts about finding the passphrase with a new IV. But what about the other situation? This is for educational ...
3
votes
1answer
104 views

What is the output length of CBC with zero input?

Given this formula for CBC encryption from 6.2 The Cipher Block Chaining Mode what is the output length of CBC if plaintext P is of length 0?
3
votes
2answers
131 views

Consequences of putting a serial number into an AES key

I have an embedded device with a secure memory of only 128 bits. I have to store the serial number (16 bits) and the AES key (128 bits) into this space. What are the consequences of putting the 16 ...
3
votes
1answer
3k views

Creating a private key with OpenSSL and encrypting it with AES GCM

My goal was to create a private key and to encrypt it with a strong cipher. That key would be used as a root certificate for an internal Certification Authority. However, eventhough openssl supports ...
3
votes
3answers
576 views

Encrypting USB traffic: Is RSA necessary for AES session key exchange when using pre-installed secret keys?

I need a solution to encrypt USB communication between device A and device B. I was thinking about configuring each device with a secret RSA-2048 key, which would be used to exchange an AES-256 ...
3
votes
1answer
494 views

Is it a good idea to do double AES encryption with 2 different keys, when one is held by the user and one stored on the server?

I'm building a web app. The app needs to keep certain data within the database very secure. Please assume for the moment that I don't have a HSM or Key-Management facility and can't afford to ...
3
votes
3answers
727 views

Steps for building a good File Encryption on Android

I want to be able to build a good file encryption on android for a cloud app. The files used are mainly pdfs, pngs, docs, audio, video, etc (all sorts of files). Edit: My constrains are that it ...
3
votes
1answer
803 views

Python implementation of AES and SHA256/512 that are FIPS-140-2 validated?

For security purposes I need to use AES encryption and SHA256/512 in my Django/Python project. I know there are various libraries out there that provide different encryption methods but I can't seem ...
3
votes
1answer
90 views

Confused about symmetric 128,256 key and the secret provided

I have searched and searched but cannot locate an answer to my question so I am hoping the experts here can. When I read about symmetric encryption like AES I see mention of the key and key size such ...
3
votes
1answer
1k views

Using GPG or PGP for symmetric database encryption/decryption in c#

I am looking to symmetrically encrypt/decrypt information in a database. This info consists of short pieces of information, which need to be individually encrypted when a specific method is called. I ...
3
votes
1answer
145 views

MasterSecret expansion into keys

I'm trying to deeply understand the steps during a TLS handshake. I've read this answer (which is btw pretty complete), but I stil got a question about the utilisation of the MasterSecret, in the ...
3
votes
2answers
238 views

Am I encrypting and storing an array of user-details correctly?

I came up with a user-details-storing procedure that was, in the beginning, based on actual security-literature – but then I just kept writing without really doing all the cross-checking I should have ...
3
votes
1answer
75 views

How can the parallelization in CTR mode be attained?

I am using CTR mode to encrypt/decrypt files. Theoretically CTR mode is faster than CFB or CBC because of its individual operations on blocks. In my case CTR mode takes almost as long as CFB. How can ...
3
votes
1answer
171 views

Do I have to use an IV when using GPG with AES 256?

Do I have to use an IV when using GPG with AES 256? Or does GPG handle that for me? I've noticed that I get different results each time I run the encryption, i.e. gpg --symmetric --cipher-algo ...
3
votes
1answer
187 views

Strange Finished message in TLS

I've tried to understand the content of the Finished message of TLS. I'm using WireShark to capture the traffic between my browser and the internet. I noticed a "strangeness" when the chosen ...
3
votes
1answer
234 views

Remote System Administration of an Encryption-Switch-Encrypted Infrastructure

I can't seem to find a decent explanation anywhere of the practicalities of remote system administration (e.g. SSH) of an encryption-switch-encrypted SAN-stored infrastructure. The environment will ...
3
votes
0answers
29 views

Laptop Encryption variables

If you are running such an operating system as Ubuntu among others, you would of seen that it gives you the polite option to encrypt your Home directory OR Whole hard drive with a robust AES 256bit ...
3
votes
0answers
79 views

How to safely store the most recently used encryption password for subsequent reuse in an app?

Let's say I have a mobile app that can save photos inside password-protected AES-128 encrypted PDF files. For convenience, I want the user to be able to encrypt a file using the previously-used ...
3
votes
1answer
70 views

What CryptoPP APIs Output Round By Round Results for AES Encryption/Decryption?

I created a program using CryptoPP APIs to implement AES ECB mode with a 128 bit key for encryption/decryption of user input plaintext. I know that ECB is the least secure AES mode but it is ...
3
votes
1answer
208 views

AES-256 Decrypt a VHD File

I recently messed up with my McAfee Encrypted Laptop (2 Drives) and got MBR overwritten by Linux (Ubuntu). I used DETech CD on C: but after 2% it failed due to Bad Sector. Using a safety precaution ...
3
votes
0answers
478 views

How does Silverlight protect the AES keys it gets from PlayReady? [closed]

I'm doing some research about how Silverlight protects AES keys. Here is the scenario: There is a smooth stream live encrypted channel service. When i log in to the service and tune the channel, ...
2
votes
2answers
683 views

7zip AES encrypted archive, padding oracle attack

I created an encrypted but forgot the password. When I attempted a pattern based brute force it said it had over a 100 trillion passwords to check. And to my knowledge that could take a few years. ...
2
votes
2answers
272 views

Slow down symetric encryption

I'm developing a program in Java. In one step data should be encrypted and exported in a file. As of now we are encrypting in AES-256 I want to slow down a possible brute force attack as much as ...
2
votes
2answers
175 views

Is my sending of encrypted information secure?

Please bear with me as I am not an expert in security. I have a server and a client. On the server I am encrypting a very secret message (using AES256-GCM to hide the information and protect it's ...
2
votes
2answers
3k views

How long would it take a single Processor with the AES-NI Instruction Set to bruteforce an AES Key?

I know that it seems like a stupid question - since it's note feasable to break AES without a quantum computer but I'm curious anyway. I read on wikipedia that the best known attack on AES-128 takes ...
2
votes
1answer
199 views

Is it insecure to provide a hash of an AES password?

I have made some software that encrypts and decrypts files using AES. I was wondering if it is safe to write a hash of the password to the file so that the program can check if a password is correct. ...
2
votes
1answer
1k views

When to use HMAC alongside AES?

One of my clients wants to provide an URL to each of his customers to register in a system. This URL would contain a query string parameter with some data (e.g. code, email and name) from his clients ...
2
votes
3answers
6k views

Is Aescrypt a valid tool for encryption or not?

I'd like to know if Aescrypt is a valid tool, or if for a very secure protection, the only choice is to use a software like gpg, or similar. More I've another curiosity, if one doesn't want to use ...
2
votes
2answers
67 views

How does KEEPASS store images, videos and attached documents/items? [duplicate]

I have read quite a bit about KEEPASS and how it encrypts passwords. However, the more I read about it, the more I find how it generates and stores passwords - the methodology provided as well as the ...
2
votes
2answers
39 views

Could I use a TimeStamp also as IV?

For an academic application, I use AES-GCM to encrypt my frames between 2 parties. To enhance security, and reduce the possibility of replay, I'd like to use a TimeStamp in my frame exchanges. But, ...
2
votes
3answers
285 views

AES Key Management / How To Swap Encryption Key

I'm currently using AES 256 for the encryption of my web application and the security policy context specifies that the encryption key must be replaced once every few months. When that happens what ...