The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

learn more… | top users | synonyms

0
votes
2answers
290 views

What is the advantage of using a symmetric cipher like AES to generate a keystream?

I see examples of AES (with a shared secret key) being used to encrypt shared secrets (e.g. nonce + counter) to produce a keystream against which the plaintext is XOR'ed to produce the ciphertext. ...
0
votes
1answer
62 views

Encrypting data in a load-balanced application - am I doing this right?

A web application I'm developing needs to store some sensitive data in a database. I need to be able to retrieve and use this data later on so hashing isn't enough. The web application might, at some ...
0
votes
3answers
572 views

Ways to keep AES encryption key safe.? [closed]

I am using AES encryption to secure some sensitive data. For that i have to provide a certain key for encrypting and decrypting. It's not safe to keep the key somewhere on the server. So instead of ...
0
votes
1answer
856 views

Using JTR to crack Skype Passwords

The scenario: coworker's Skype somehow lost his auto-fill password. He doesn't remember it anymore, and the account is hooked up to an email address that no longer exists. He's never purchased any ...
0
votes
1answer
2k views

How does PKCS#7 padding work with AES-256, CBC mode?

I'm a bit confused with AES-256, CBC, and how it works with padding (PKCS#7). Whenever I encrypt data of multiples of 16 bytes (the block size), extra 16 bytes are always padded at the end. For ...
0
votes
1answer
390 views

What AES mode does SQL Server 2012 use?

I looked at this link that shows how to encrypt a SQL column via a certificate (RSA??) and AES256. I created a dummy table (script at GitHub) intentionally using identical plain text (Credit Card = ...
0
votes
1answer
242 views

AES encrypt secret key with plaintext

We need to be able to retrieve password. Hashing is one-way, we can't do that. So we ended up using AES. We want to know if the following schema is safe or not. I am only familiar with modulo PK ...
0
votes
1answer
484 views

How secure is AES-128 for Zip files?

Say you have a cryptographically random 8 character long alphanumeric password (A-Z, a-z, 0-9) used to encrypt a ZIP file with AES-128. Can this program: ...
0
votes
1answer
39 views

Generate Passphrase from the data & encrypted data

right now I'm thinking about how to secure some data inside an Application... Now i have the following problem: Is it possible to generate the passpharase from a decrypted message and the same ...
0
votes
1answer
63 views

two encrypting / hashing case, which one is best

Thinking about these below two cases, which one is best and most secure one 1st case //key1 generated from static salt and user password, because in case attacker don't know about source code (bad ...
0
votes
1answer
64 views

How to best use JavaScript to encrypt client side so the server never sees it?

I don't want the server to ever see the raw input and would rather have the client do the encryption and then pass the data (over https) to the server for storage. If I use a JS library to AES ...
0
votes
1answer
66 views

Encryption key generation performance

A question for cryptography experts. Imagine we have a conceptual Notes.app: There are notes (title|content) stored as AES-256 encrypted strings Application has to present a list of all notes ...
0
votes
1answer
164 views

Can SHA-1 PRNG still create secure cipher keys?

I am concerned that a SHA-1 PRNG cannot produce an AES-256 cipher key with the expected 256 bits of security, or indeed any secure cipher key where over 165 bits of security are expected. The SHA-1 ...
0
votes
1answer
61 views

What key needs to be used to compute HMAC?

I use AES-128bit to encrypt files and I want to compute a HMAC for each one of the encrypted files to ensure their integrity. Can I use directly the AES KEY to compute HMAC or should I used a derived ...
0
votes
2answers
285 views

How to implement shamir's secret sharing algorithm using AES_ENCYRPT

I am using MySQL AES_ENCRYTP() and AES_DECRYPT() to store sensitive details in a database, and currently storing the key in a php file outside of the web root with read access only. The key file looks ...
0
votes
1answer
175 views

Key distribution advice

I have been thinking for days about that problem! The application is based on a student system management. I am implementing database encryption on a column level and The encryption occurs at the ...
0
votes
1answer
100 views

Securing the SOAP Messages

One of my clients wants to encrypt few sensitive information which will be transferred through webservices / SOAP. My client has the following suggestions: Encrypt the sensitive data with AES ...
0
votes
0answers
18 views

Gladman's file encryption library = AES in counter mode with HMAC-SHA1 authentication?

I would like to use Gladman's algorithm to create AES encrypted data in JavaScript. I use the Crypto-JS library, but its performance is horrible. PBKDF2 is terribly slow, so I switched to another ...
0
votes
1answer
29 views

Is embedding the EAX nonce inside the Associated Data considered safe?

As the nonce bits would be used twice in that case, does that break EAX security? The examples I've seen using EAX have separated the nonce from the Associated Data, but to me it makes more sense to ...
0
votes
1answer
186 views

Should I run my password through Bcrypt before using it for encrypting a file with AES-256? [duplicate]

I need to encrypt a file with a password that can be memorized. So I was thinking about running the password through some rounds of Bcrypt before using it for AES encryption, so every time I want to ...
-1
votes
4answers
73 views

When should I use symmetric encryption instead of RSA?

I'm currently using GPG RSA keys to encrypt binary files. Many people recommend using symmetric keys to encrypt large files, and then encrypt the symmetric key with a public key. At what file size ...
-1
votes
1answer
262 views

Encrypton method that would encrypt alphanumeric data to alphanumeric data [closed]

I need efficient way(possibly as strong as AES or AES itself) to enrypt (only) aplhanumeric data and get out only alphanumeric data, using some known library (i don't want and intend to implement AES ...
-1
votes
1answer
87 views

Permutation in Block Ciphers

I was reading some e-books to understand the basics of block ciphers and how it works in AES. As i understood, Permutation plays a big part in AES and Block Ciphers, Here is what i understood by ...
-1
votes
1answer
556 views

Why can't a AES256-encrypted file be decrypted on machine other than the one it was encrypted? [closed]

I encrypted a file on my mac using openssl openssl aes-256-cbc -a -salt -in one.jpg -out two.jpg now if I try to decrypt it like that: openssl aes-256-cbc -a -d -salt -in two.jpg -out one.jpg on ...
-1
votes
1answer
347 views

How to encrypt by AES-Twofish-Serpent

I was wondering how to encrypt by doing a AES-Twofish-Serpent encryption. Does this mean I encrypt in AES first then after that in Twofish, and after that in Serpent (three separate encryptions). ...
-2
votes
2answers
136 views

Is AES feasible for secure hashing files? [closed]

There was already a similar topic "Why AES is not used for secure hashing, instead of SHA-x?", but it was not about files specifically, and I, personally, am not convinced by the answers in it. "AES ...
-2
votes
1answer
474 views

Cascading Encryption Algorithm using mcrypt or GnuGP

I'm trying to a cascading cipher encryption algorithm to encrypt a textfile via mcrypt. I'm essentially trying to emulate the behavior of TrueCrypt, where it can cascade two or three different cipher ...
-2
votes
1answer
138 views

What mode of operation is secure for block ciphers?

as RC4 is not secure and AES-CBC is same thing the only solution is using EAX mode for AES. but why mozilla NSS don't support EAX mod ? is there any secure EAX implementation ? and why wikipedia says ...
-2
votes
3answers
868 views

How long (in letters) are encryption keys for AES? [closed]

How long is the encryption/decryption key for an assymetric algorithm, such as AES? If I use AES 128-bit, how many characters should I type in for my key? What about AES 256-bit? Edit: Here is why I ...
-3
votes
1answer
157 views

Different AES 256 algorithms produce different results?

I've tried 3 AES 256-bit CBC encryption programs, and I seem to be getting different results for each one with the same 32-character password, which consists of all @ signs. They are: Polaris SSL ...
-3
votes
1answer
231 views

Which is more secure, AES or Rijndael? [closed]

Which algorithm is generally considered to be more secure, and is AES-192/AES-256 still considered to be secure? After reading this it's lead me to belive that the Rijndael algorithm would be a more ...
-5
votes
2answers
2k views

Is AES slower to encrypt than MD5?

Is this the right interperation of this diagram: http://www.cryptopp.com/benchmarks.html AES/CCM MiB/Second:61 Cycles Per Byte:28.6 MD5 MiB/Second:255 Cycles Per Byte:6.8 And does that ...