Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

Filter by
Sorted by
Tagged with
2 votes
2 answers
62 views

Best Practices for AES: Fixed Key with Unique IV vs. Unique Key with Fixed IV

I'm working on implementing AES256 encryption for file security and am considering two different strategies: Using a fixed key with a unique initialization vector (IV) for each file. Using a unique ...
petertc's user avatar
  • 121
1 vote
1 answer
67 views

Login with roles without internet

Disclaimer: question orignally posted here but i was encouraged to ask it in this stack instead. Introduction part I'm writing an application that requires authentication to be used, specifically the ...
Nifil's user avatar
  • 113
0 votes
1 answer
87 views

Why Ransomware generate keypair in victim?

I read this answer Ransomware encryption keys and understood how wannacry works. But I still have a question: as I understand, the hacker will put the hacker's RSA public key in the malware, the ...
Thanh's user avatar
  • 1
0 votes
0 answers
5 views

How Helpful is NXP's LRP Encryption Protocol vs AES for short keys? [migrated]

NXP has a custom (I think) encryption protocol known as "Leakage-Resistant Primitive", or LRP, built on top of AES. I think the goal of this is to basically "expand" the length of ...
johnnyb's user avatar
  • 101
0 votes
0 answers
5 views

Key Exhaustion Risks in Symmetric and Asymmetric Cryptography [migrated]

For the symetric keys it is recommend that the same key should not be used to encrypt large number(2^32) of cipher blocks to avoid the key-exhaustion risk. Curious to know whether the asymmetric key ...
Bhuvan's user avatar
  • 101
0 votes
1 answer
84 views

Password-based encryption: keeping the user logged in without entering password again

Context I have a system where some of user's data is encrypted via AES. Each user has their own key K. When the user creates an account, the K is generated and encrypted with a key derived from ...
v_slav.b's user avatar
0 votes
1 answer
78 views

Assembly routine for AES CBC encrypt

I'm assuming that OpenSSL is just using these functions here. page 66 is CBC https://www.intel.com/content/dam/develop/external/us/en/documents/aes-wp-2012-09-22-v01-165683.pdf Can I just generate a ...
shawnixer's user avatar
0 votes
1 answer
71 views

Can token decryption endpoint response codes variability lead to security vulnerabilities?

To clarify the question, here's our case: We generate encrypted tokens by applying AES-CBC (256 bit) and Base64 to payload: encrypted_token = Base64.encode(AES_CBC_256.encrypt(key, iv, payload)). ...
vetements's user avatar
1 vote
0 answers
66 views

MbedTls - keeping context private?

Let's assume we're running on mbed system with internal and external RAM. Dumping external RAM is much more easier for attacker on such systems when debug ports are locked. I'm wondering if the ...
akimata's user avatar
  • 11
0 votes
0 answers
81 views

Same output of KDF for Alice and Bob?

Alice and Bob use the same password which will be used in a KDF like PBKDF2_HMAC or Argon2id to generate a AES-key. The problem is that Argon2id generates a different output for the same password, ...
O'Niel's user avatar
  • 2,914
1 vote
1 answer
218 views

How to get a 12 bytes authentication tag in AES-GCM

i want to generate a 12 bytes authentication in AES-GCM. my code only give me an output tag of 16 bytes. i have tried to use the min_tag_length but it rises an error. can i get your guidance, thank in ...
Zeus8497st's user avatar
0 votes
0 answers
440 views

How can I understand the zip2john hash format?

I had a .zip file that was apparently encrypted with AES-256 deflate. 7z l -slt archive.zip | grep Method Method = AES-256 Deflate Then I used zip2john to get a "hash" out of it: archive....
IRP_HANDLER's user avatar
3 votes
0 answers
113 views

Does a signature service provider level digital certificate for electronic signature comply with eIDAS requirement for Advanced Electronic Signatures?

I have some basic questions regarding eIDAS and 'Advanced Electronic Signatures'. Say, if I create a product under my company Acme Inc that offers a simple electronic signature where I sign every ...
BambiBundle's user avatar
0 votes
0 answers
87 views

What is the best way to encrypt asymmetric metadata?

As a hobby project I'm thinking about how to write a secure chat where even all metadata are encrypted so that it is impossible to leak any (meta) information by design. My basic idea is right now: ...
rekire's user avatar
  • 133
0 votes
0 answers
179 views

Bypassing AES encryption if the keys are not in local,but in server

When I conduct a mobile pentest, I have run into payload encryption in HTTP traffic. In general, the AES key and IV ( initialization vector) are located in APK, and can be used to encrypt the payload ...
Not a Salmon Fish's user avatar
0 votes
0 answers
109 views

Backup to a remote Encrypted APFS drive mounted through Samba. Is this a sound plan?

Say I have a remote machine (something like a VPS) that I have no physical access or physical authority over other than a user on it (with root access). However, I'd like to do Time Machine backups on ...
The Quantum Physicist's user avatar
0 votes
3 answers
304 views

AES mode for reusing same keyset

I'm building a sharing protocol where users share data. To make it so only those authorised to read the data can do it, I'm using AES256 encryption. Every authorized person has a keyset (IV & key) ...
Valmond's user avatar
  • 123
1 vote
4 answers
272 views

Is there any benefit of encryption if the password is known?

Is there a benefit of encryption of a file (for example with AES-GCM), if the password is included alongside the encrypted data? I know it sounds like a useless question, but I am curious about its ...
Okoba's user avatar
  • 17
1 vote
2 answers
198 views

Recommended temporary key size for communication

What I'm going to do is use AES-256 encrypted network communication to agree upon a pseudo-random key for further communications between two peers, so that every "session" utilizes a ...
R-Rothrock's user avatar
0 votes
1 answer
168 views

Is rsyncrypto secure?

My information security model right now is "if you want the data that I am storing on the cloud, you can have it" and I would like to change that to "if you want the data and have a $5 ...
StrongBad's user avatar
  • 261
3 votes
1 answer
243 views

How to form the IV and Additional Data for TLS when encrypting the plaintext

When using AES GCM for encryption within TLS and referring to the below diagram: Is iv[0:3] the fixed IV established from the handshake and iv[4:11] are the current (write) sequence number + 1? For ...
rare77's user avatar
  • 145
1 vote
1 answer
397 views

AES ECB cookie bypass

I am currently participating in a CTF Challenge and have reached a stage where I discovered a "log_admin" page. This page generates a cookie that is encrypted using AES 128 ECB. I obtained ...
user294797's user avatar
0 votes
2 answers
372 views

Why AES256 with SHA384 in TLS [closed]

Is there any concrete/solid rationale for this choice of cipher? Seems to be the default when I connect via TLS1.2 to an Apache2 server (whatever latest version on Debian 11) with configuration lines ...
Cal-linux's user avatar
  • 113
4 votes
4 answers
884 views

Using hashed trigrams to search over encrypted data

For practice, I write let's call it a notebook app that stores users' notes in AES-encrypted form. For encryption, I use a password-based intermediate key technique as described here. Actually, the ...
v_slav.b's user avatar
0 votes
1 answer
711 views

Mifare Desfire authentication process / cloning protection

I am trying to write a small explanation for a customer, who wants to understand why his Mifare Desfire transponders are safe from being cloned. I was trying to search for an easy scheme or text that ...
Dahlin's user avatar
  • 1
1 vote
0 answers
205 views

How to decrypt SSHv2 using AES-256 session keys from memory dump?

How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump. I have the full PCAP for the SSH sessions, including the initial handshake and ...
Wesley Jones's user avatar
0 votes
2 answers
251 views

Is using weak random numbers for the initialization vector of AES just a theoretical issue?

I'm the maintainer of pypdf, a Python library for reading/manipulating PDF documents. I recently discovered that pypdf used random instead of secrets for ... Generating the initialization vector (IV) ...
Martin Thoma's user avatar
  • 3,932
1 vote
3 answers
215 views

Is it possible to generate a read-only key for a symmetrical encryption (AES)?

I am working with hardware that can only encrypt with AES. The problem with this is that the message must be publicly verifiable on the blockchain, without the encoding key being exposed. This is the ...
Koray Kaya's user avatar
1 vote
0 answers
158 views

Where is the 8 byte explicit nonce for decrypting AES GCM within TLS?

I'm confused how to retrieve the remaining 8 bytes of the nonce (to combine with the 4 bytes established during the handshake) to generate the 12 byte IV to decrypt AES 128 GCM. RFC 5288 "AES ...
user997112's user avatar
0 votes
1 answer
475 views

Generating AES 256 key from ECDH P-384

Is there anything wrong with hashing(with SHA256) the shared secret generated by ECDH that is 384 bits long and using that as the AES key? Is there a difference between that and, say, truncating the ...
Ognjen Bjeletic's user avatar
1 vote
1 answer
115 views

javascript: how to apply block cipher to byte stream

I am writing browser javascript that has a pre-shared key with nonce, and creates a binary websocket connection. How can I apply block encryption-authentication such as AES-GCM to the messages? Is it ...
personal_cloud's user avatar
1 vote
0 answers
130 views

Symmetric key importance During encrypt and decrypt [closed]

I am performing a small command line operation the goal is to generate a symmetric key using openssl and store the key in TPM FAPI keystore. After modifying the symmetric key, the decryption should ...
chandu's user avatar
  • 161
3 votes
0 answers
2k views

Strongest symmetric algorithm in 2022 [duplicate]

I'm curious about the best encryption algorithm for encrypting my files in 2022? I thought it was a good solution to encrypt my private key with AES-256 but I decided to ask here and choose better ...
GameO7er's user avatar
  • 169
0 votes
2 answers
315 views

AES Encryption as XSS protection for url parameters?

So, I found a website that uses AES encryption to prevent XSS and I'm wondering if this approach is inherently flawed. It has an endpoint like execute.php?code=encryptedPayload which de-crypts the ...
xsrf's user avatar
  • 178
2 votes
2 answers
16k views

Generate AES-256-GCM key

I'm using aes-256-gcm encryption. I used a sample key provided in the docs and it works fine. I also tried a key generated from here and it works fine. There's no option to specify gcm here yet the ...
Wilfred Almeida's user avatar
1 vote
1 answer
95 views

How to encrypt peer data exchange?

The situation currently is as follows: All our devices in the same network broadcast their state (alongside with unique IDs) over the network. They also listen in for broadcasts of others. Everything ...
SF.'s user avatar
  • 223
1 vote
0 answers
65 views

Can parts of WebCrypto AES-GCM be reused between encryptions

I am trying to better understand the processes involved in e2ee using WebCrypto on the browser. I understand that the only real method to use a passphrase to generate a symmetric key on the browser is ...
masimplo's user avatar
  • 111
1 vote
1 answer
268 views

Where is the AES key of ransomware stored (in the file header/trailer)?

Advanced types of Ransomware generate, usually, an AES 128 bit key (used to encrypt files, some types of ransomware use a unique AES key for each file). This key is generated on the fly. In addition, ...
Moooz's user avatar
  • 35
0 votes
0 answers
39 views

Is it possible to hack encrypted external HDD,if you have access to it? [duplicate]

If I lose my external HDD and somebody finds it and tries to hack, will he succeed?Is it possible to get data from encrypted disk by disassembling it and working with platters? HDD is APFS AES 256 ...
alexandergill's user avatar
1 vote
1 answer
880 views

Is it safe to store data on APFS 256 AES encrypted external HDD disk?

I'm using a MacBook and want to store confidential data (financial documents, passwords, private photos, etc.) on an external HDD disk. How safe is setting up APFS AES 256 encryption with disk ...
alexandergill's user avatar
0 votes
1 answer
102 views

Probability of getting different plaintext with different key

What is the probability that an AES encrypted file, using a wrong password, gets decrypted to something different than the plaintext, but which could still be likely to be interpreted an the true ...
reed's user avatar
  • 15.8k
2 votes
1 answer
3k views

CryptoJS AES encryption/decryption problem

A simple encryption/decryption using CryptoJS gives me a weird output. Can anyone point me to where the code is wrong? (I'm looking for the output in the console) var code = "Testcode"; var ...
newbie's user avatar
  • 23
0 votes
1 answer
126 views

Is having a seperate server to handle encryption operations a secure way to protect a private key for a web application?

Assume I have two servers which are part of a production environment for a web application which handles sensitive user data. The first server is a ruby on rails application, and the second is a ...
Chev_603's user avatar
  • 256
2 votes
1 answer
489 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
Ray Woodcock's user avatar
0 votes
2 answers
829 views

Is possible to reverse engineer a AES encryption of a known file format?

If the encrypted file is from one of the known formats, such as doc, jpg, mp3, etc., is it possible to reverse engineer it and decrypt it? I "roughly" know the mechanic behind the AES ...
Noob001's user avatar
  • 13
2 votes
0 answers
204 views

Kaspersky Total Security Data Vault encryption AES256 BUT with "effective key-length 56bit"

While comparing Kaspersky Total Security (KST) with Kaspersky Internet Security (KIS). One of the "extras" of KTS is the added "feature" of "Data Vaults", which "...
ARGYROU MINAS's user avatar
-2 votes
1 answer
155 views

AES - Is it sensitive to let anyone encrypt a message only you can decrypt?

I have an application in which some data can be encrypted through AES. Such data can emanate from multiple sources I may not know. For practical reasons I want those sources to be able to encrypt ...
Vincent C.'s user avatar
1 vote
1 answer
330 views

Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?

In Tor, when a client communicates with an entry node, they exchange the parameters such as the prime number and the generator with each other through DH. What about when an entry node communicating ...
Gaai Chia's user avatar
1 vote
4 answers
2k views

AES Encryption vs hash function with the strong assumption of input size and secure key?

There are plenty of questions about the difference between AES encryption and hash functions. I read some of them and the general answer is that AES is reversible as long as the key is exposed. AES ...
Jaehan's user avatar
  • 11
0 votes
1 answer
112 views

Soundex and encryption : good friend?

We are considering using the Soundex algorithm to improve our search capabilities in our app. Our app data are encrypted in the DB. (EAS256) The Soundex result will be stored in clear next to our ...
Marc Alves's user avatar

1
2 3 4 5
18