The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

learn more… | top users | synonyms

1
vote
1answer
85 views

Python implementation of AES and SHA256/512 that are FIPS-140-2 validated?

For security purposes I need to use AES encryption and SHA256/512 in my Django/Python project. I know there are various libraries out there that provide different encryption methods but I can't seem ...
0
votes
0answers
41 views

How can I safely include the encryption key in the encrypted file?

I am encrypting text files using AES256 (no particular reason, that can easily be changed). Before granting access to a file, I need to verify if a party knows the correct key, but without necessarily ...
1
vote
2answers
116 views

File encryption for a storage API

I'm implementing a Dropbox-like API, and one of my requirements is to have the files stored encrypted on the server. It is not required that the files are made unreadable by the server, only that they ...
0
votes
1answer
53 views

Software for encryption/decryption files [closed]

I need a free software with such features Possibility to encrypt/decrypt a file Supported cipher algorithms are AES256 and RSA Possiblity to enter key and salt for encryption/decryption Optionally ...
0
votes
0answers
13 views

gpg2 - no option to select aes block cipher and outdated use agent? [migrated]

With OpenSSL, I can select a what type of block cipher to use for encrypting a file. For example, if I want to encrypt a file with AES256 CBC block cipher mode: openssl aes-256-cbc -a -salt -pass ...
1
vote
1answer
180 views

PGP as method of sharing AES key?

Would PGP work as a method of sharing the AES key, as shown below, and what would be the flaws with this method of encryption? Server sends PGP public key Client generates (uses as AES key for ...
-1
votes
1answer
100 views

Is there a benefit to encrypting a file multiple times? [duplicate]

If I had to store a text file with some confidential information on the cloud, would encrypting the file multiple times (say, 3) with different passwords using WinRAR (AES with a 256 bit key) provide ...
-2
votes
1answer
414 views

Is AES more secure than Rijndael? [closed]

Which algorithm is generally considered to be more secure, and is AES-192/AES-256 still considered to be secure? After reading this it's lead me to belive that the Rijndael algorithm would be a more ...
1
vote
2answers
95 views

Which encryption technique should be used for cloud computing data transfer?

I want to setup my application for cloud computing for Software as a Service. There is going to be a lot of data transfer between my server and client, to and fro. The technique I have envisaged is: ...
3
votes
2answers
203 views

Why do the banks all use weaker TLS suites? [closed]

I've been checking out various TLS certificates lately and noticed that most of the banks seem to have the following two issues: 1) They do not offer perfect forward secrecy 2) They are still using ...
3
votes
3answers
164 views

Is there any security gain / risk by adding additional padding (beyond what is required) when using AES-256 to encrypt very short strings?

I would like to encrypt some authentication tokens using AES 256 (not tied to this algorithm but it seems to be a reasonable choice). These messages are usually very short at 128-256 bits. I'm ...
0
votes
0answers
23 views

Possible CPA or CCA attack when using AES-CBC mode under the following situation?

Both client and server know a shared key in advance. Both sides us EVP_BytesToKey() derive a pair of same key and same IV. Then, client and server start transferring data encrypted by AES-CBC mode ...
0
votes
0answers
51 views

Are temporary files an issue when opening and editing an encrypted 7z file?

I am new to security and encryption. I want to store important information like passwords and pin codes so I don't forget them. So far I have been using LastPass but I would prefer a solution I ...
0
votes
3answers
195 views

Java AES encryption output length

I am trying to encrypt few database columns (string values) using Java AES algorithm. This is to protect certain sensitive data. For some users these data should decrypted. In Java AES encryption, if ...
1
vote
2answers
57 views

How to Conceal/Detect PGP Symmetric Algorithm Used

When Symmetrically encrypting a file, (not signing, not an asymmetric encryption question), is it possible to conceal the encryption algorithm used, or is it already concealed, but just showing on ...
4
votes
2answers
973 views

Extract AES key by comparing plaintext and encrypted data

Is there a kind of analysis which would enable me to get AES key which was used for encrypting arbitrary data while I have both original and encrypted version of data ? The problem is that the AES ...
1
vote
2answers
88 views

Client-server encryption technique explanation (TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, 128 bit keys)

I opened a web page using https. When I looked at the page info provided by my browser (Firefox) I saw following: Connection encrypted: High-grade Encryption ...
0
votes
0answers
32 views

How does Spideroak manage encryption keys

I'm trying to understand the following from SpiderOak's engineering page (sorry I'm on a mobile phone so have no access to formatting functions like quote blocks): "SpiderOak uses a nested series of ...
1
vote
1answer
176 views

Using AES as a Stream Cipher

I need to send a lot of small messages that are usually between 128 bits and 256 bits long, and each message is encrypted with a separate 128 bit AES key. Therefore, to send each message with the key ...
0
votes
1answer
59 views

Will obtaining password hash compromise derived encryption key?

I've been looking at how PBKDF is used to generate encryption key for AES. One thing I couldn't get my head around is that how those OS keep the encryption key safe apart from using hardware modules. ...
3
votes
1answer
572 views

Salt usage for Spring security?

I use the Spring security for Java web applications and I have written an authentication provider which is working without salt and now I want to either add salt or alternatively use the built-in ...
-1
votes
1answer
129 views

PHP/Ajax Data transmission security

I'm learning about web security mechanisms. I have developed the following system in PHP and JavaScript: assuming that I have a page named: messages.php which is a real-time chat system. first when ...
1
vote
2answers
111 views

Cryptanalysis of encrypted data at rest

Imagine I have a file encrypted using AES CBC mode with a key and a random IV. The attacker access to the encrypted text and the IV used but not the key. In this scenario there is no vulnerability ...
0
votes
2answers
103 views

Saving passwords decryptable for later usage

I'm in a situation where I need to calculate a hash of the result of the password in plain text plus some random chars representing a session. The gained hash will be compared to another hash that is ...
5
votes
2answers
156 views

Security sanity check

A company whose services I'm trying to integrate uses this protocol: An AES key is embedded in an Android library. To authenticate itself, the library sends a SHA1 hash of the key over plain HTTP. ...
0
votes
1answer
37 views

In TLS1.2 AES-GCM mode, what happened when input is not exactly the multiple of its block size?

I know that AES-GCM mode does not need padding, and its output are exactly the length of input data plus the tagging. But I am a little bit lost, as AES itself is block cipher, it could only operate ...
1
vote
1answer
148 views

How to decrypt a file when I have its key?

How could I decrypt a file (encrypted with AES-128) using openssl ? I do not remember the passphrase I used to encrypt it, but I saved the key generated and used to encrypt my file. How could I use ...
2
votes
1answer
94 views

Properties of AES Encryption

First of all, I apologize if these questions can be answered using a web search, but I'm sort of a crypto noob and don't know what to search for. Given N AES encrypted messages (where the message ...
1
vote
1answer
115 views

256 Bit Key into AES 128 same output as 256 Bit Key into AES 256

I have two different crypto libraries I created, one is in java and uses the standard built-in java crypto libraries. The other uses openssl and has been wrapped in java through the JNI. I'm ...
5
votes
3answers
113 views

AES256, repeated IVs and mostly-costant payload: how ok/bad is that?

I recently came across an application that more or less does this: starts from a (supposedly unknown to others) key generates a random IV encrypts some smallish (~ 160 bytes) payload with the key ...
0
votes
0answers
67 views

get encryption key from encrypted and decrypted data

I used encfs to encrypt some important files on my system , But sadly i forget the encryption key , i still have a version of some of the the encrypted files .so my question is : is there there a way ...
3
votes
1answer
110 views

When to use HMAC alongside AES?

One of my clients wants to provide an URL to each of his customers to register in a system. This URL would contain a query string parameter with some data (e.g. code, email and name) from his clients ...
9
votes
3answers
3k views

Is “Why Should You Avoid AES In MySQL?” true?

From a 2012 Smashing Magazine article quite a bold statement is made to avoid AES in MySQL itself. Or as they put it "Why Should You Avoid AES In MySQL?". However, if you search for SQL encryption, ...
0
votes
1answer
168 views

Cracking Kingston DataTraveler vault privacy - is it possible?

I have Kingston DataTraveler vault privacy USB flash drive (DTVP/2GB). Here is tech specs. Flash drive has a 256-bit AES hardware based encryption. My flash has password protected and I do not know ...
1
vote
2answers
223 views

How to treat/hash ECDH shared secret to use as keys for AES?

I'm doing some studies/development for a security system that would use ECDH with ephemeral keys. In my code I'm currently using a 256-bit EC, so when the two parts compute the shared secret, I get a ...
4
votes
1answer
125 views

How are chosen plaintext attacks against ECB implemented in the real world?

Reading up on attacks against AES i have seen countless examples of why ECB is bad, and the logic behind it i can understand, but i can't get my head around how these attacks actually work in the real ...
3
votes
1answer
97 views

Do we have to take algorithm substitution attacks seriously?

Bruce Schneier's blog drew my attention to algorithm substitution attacks which may leak symmetric keys through IV or padding or other covert channels, encrypted with escrow keys. The major premise is ...
0
votes
1answer
61 views

Gmail Voicemail Encryption

I want to listen to my voicemails in a secure but convenient fashion. I plan do this by having my PBX encrypt the voicemail using openssl aes 256 cbc with salt and a single static password. The ...
4
votes
1answer
117 views

How did SSLv3 get AES?

IANA maintains a registry of TLS cipher suites at TLS Parameters. TLS provides TLS_RSA_WITH_AES_128_CBC_SHA, its value is {0x00, 0x2f}, and its available in TLS 1.0 and above. The AES cipher suites ...
0
votes
2answers
194 views

How long would it take to bruteforce an AES-128 protected pdf knowing the key is 20 letter long and that the charset is A-Z,0-9?

The question says everything, knowing that a pdf is protected using standard Adobe password encryption that comes with Acrobat Pro (which as far as i know is AES 128) how much would it take to ...
2
votes
1answer
117 views

What cryptosystem makes the encrypted text look like random noise?

Suppose one wants to setup a cryptographic protocol in which 2 parties communicate using an encryption scheme that produces encrypted messages indistinguishable from random data (the desired property) ...
1
vote
2answers
98 views

Expiring AES Key

Is there any way to make an "expiring" AES key? Here's scenario to give a better picture: Say Bob has some data which he would like to share with Alice. Alice has a public and private key, let's say ...
1
vote
1answer
164 views

Crazy Finished Message in TLS

I've tried to understand the content of the Finished Message of TLS. I'm using wireshark to capture the traffic between my browser and the internet. I noticed a "stangeness" when the chosen ...
3
votes
1answer
864 views

Using GPG or PGP for symmetric database encryption/decryption in c#

I am looking to symmetrically encrypt/decrypt information in a database. This info consists of short pieces of information, which need to be individually encrypted when a specific method is called. I ...
0
votes
1answer
104 views

How to do Rijndael MixColumns step

I am trying to go through all of the the steps in the Rijndael Encryption Algorithm using pencil and paper. I have been using ...
5
votes
4answers
4k views

TrueCrypt -vs- MacOS encrypted sparse image - equally secure? Other alternatives?

I'm currently trying to find my personal best solution for storing passwords and other sensible data. Recently I've used 1Password on iPhone and Mac but I'm not really satisfied with its predefined ...
0
votes
0answers
42 views

BKSQ block cipher

I'm trying to implement the BKSQ block cipher (similar to AES) but to do so I need the inverse mixcolumns operation, therefor I need to inverse the 2x^2+2x+3 operation. e.g for the AES it is c(x) = ...
1
vote
2answers
138 views

Which AES key length to choose for OpenVPN?

I plan on using OpenVPN on client devices which are small embedded machines, so I must balance between speed and security. The OpenVPN documentation says that it is "general wisdom that 1024-bit keys ...
3
votes
2answers
187 views

Is AES(Rijndael) faster than Blowfish?

I know theoretical that blowfish is much faster than aes. But I benchmarked several algorithms including aes and blowfish for 1MB, 5MB, 10MB etc. files in java 8 platform and bouncy castle library. In ...
1
vote
2answers
72 views

How can I encrypt compressed data safely?

As mentioned in this particular answer, compressing data before encryption may lead to the CRIME attack, especially if the hacker has collected many similar versions of the transmitted data. Let's ...