Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

22
votes
3answers
4k views

Why does BitLocker not use RSA?

If I do not understand wrong from this post and Wikipedia page of the BitLocker and TPM, by default, BitLocker uses symmetric cryptography like AES. However, TPM is capable of performing RSA ...
0
votes
1answer
48 views

Public key encryption confusion

I'm learning Linux, and currently SSH. But there are details that I don't really understand. I've seen and understood how Diffie-Hellman key exchanges work from a mathematical point of view, but what ...
1
vote
1answer
53 views

Cross platform OpenSSL aes encryption

I encrypted a file by using the following command from a stackoverflow answer: openssl enc -in file_name -aes-256-cbc -pass stdin -out file_name.aes; I can decrypt this file by running: openssl enc ...
0
votes
1answer
53 views

Decrypting AES-128-CBC leads to first block being correct, the rest corrupt

I'm currently investigating a piece of software which encrypts it's files with AES-128-CBC. From disassembly it is truly known that the algorithm used is correct (log messages plus calls to the ...
0
votes
0answers
37 views

Why boxcryptor use hybrid cryptosystem to encrypt files

I do not understand why they need asymmetric key encryption, if the client does not use the public key. As far as I understand it, the user password is used to decrypt the private key and no public ...
1
vote
0answers
32 views

When using openssl to encrypt a file, how would I create a key made up of specific letters? [closed]

I want to create a 128bit AES key made up of specific letters. I think I would need to use something like openssl genrsa -aes128 -out privkey.pem or openssl genrsa -out privkey.pem but I'm not ...
0
votes
0answers
78 views

encrypting TCP and UDP with self signed cert

I don't have much experience in computer security and I am developing a server for a project. I'm using a tcp connection and UDP packets for some real time data transmission. I want both of these ...
4
votes
1answer
177 views

Safe encryption algorithm that works with files bigger than 68GB

In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
1
vote
1answer
57 views

Are there any known examples of companies who were successfully breached using POODLE, BEAST or SWEET32?

When this was first announced back in 2014, Brian Krebs reported on how much of a threat these kinds of birthday attacks were, but I have not been able to find a case study of a successful breach. Is ...
1
vote
1answer
50 views

Length of a stretched gnupg passphrase that is comparable in strength to an unstretched string of 256 random bits

Assume that we want to encrypt a file with gnupg using AES-256 as the encryption algorithm. (Hence, symmetric encryption.) In this mode, gnupg requires a passphrase from the user. I understand that ...
1
vote
1answer
39 views

Decrypting gpg2-symmetrically-encrypted files using non-gpg2 tools

If I encrypt a file using gpg2 and specifying AES256 as my encryption algorithm, can I decrypt it with tools other than gpg2? More generally, does the fact that one tool used AES256 for encrypting a ...
1
vote
2answers
103 views

Is AES-256 not the best decision for mantaining performance in a Datalake?

I'm worried about performance in a Data Lake used for Data Science purposes. I need to encrypt confidential data and, because of definitions I won't dive into here, the algorithm to fulfill this ...
-1
votes
1answer
67 views

want to know best way to my case is to encrypt the UART communication channel? [closed]

I have device connected to scooter it’s 4- wire uart communication. My fear is some can read the ascii data and send the at commands and unlock my scooter and steal the scooter. I want to secure the ...
0
votes
0answers
182 views

How to enable hardware encryption of intel ssd 660p 1TB? [migrated]

How to enable hardware encryption of my intel ssd 660p 1TB? I can't find any useful information on the internet. I hope that the encryption function can be used for theft prevention. That is to say, ...
1
vote
0answers
71 views

Is GPG's AES encryption that much stronger than its RSA headers? [duplicate]

Correct me if I'm wrong at any point of this questino. I understand that AES is a lot cheaper to compute than RSA (or any form of asymmetric encryption) and that that is why GPG and similar programs (...
1
vote
1answer
104 views

AES, RSA, ECC Key size [closed]

It is generally said that 2048-bit RSA keys are roughly equivalent to 112-bit symmetric keys and 2048-bit RSA keys are "sufficient for commercial use until around the year 2030" (https://security....
1
vote
1answer
87 views

How to combine symmetric and asymmetric encryption to encrypt large files?

I understand that it is possible to combine symmetric and asymmetric encryption in a way that makes use of the performance of symmetric encryption, and also getting the benefits of being able to ...
0
votes
1answer
47 views

Why is authentication impossible with CBC mode?

Suppose I have a protocol where fixed-length messages (1280 bytes, no padding) are encrypted with AES in CBC mode. I want to put some data in the message body to verify that the message is authentic. ...
15
votes
2answers
2k views

What is the impact of the reported weak IV in 7 Zip?

It has been reported that 7 Zip generates IVs in the weak manner. What is the actual impact of this? I'm asking about historical Zip files that I've sent. I've no plans to use 7 Zip going forward ...
0
votes
1answer
39 views

Can Honey Encryption be used for CAN bus security? [closed]

AES encryption was one of the best encryption techniques used but it had a major disadvantage that it cannot handle brute force attack. Hence honey encryption was introduced which can handle brute ...
0
votes
1answer
136 views

AES Keys Storage for encrypting hashes of SAM file in Windows 10

Hashes of user account passwords in Windows 10 (like in older versions) are stored in SAM file. Using standard utility pwdump 7 for getting these hashes gives following result: ::LM hash : NTLM hash ...
0
votes
2answers
93 views

How long is Key lifetime of AES-GCM key?

As I know the AES-GCM used a nonce and if the two message has the same nonce then the secret key can be retrieved. If two computers use the AES-GCM to encrypt exchange messages, then what is the key's ...
-1
votes
1answer
57 views

How does key exchange work? Using symmetric algorithm such as AES

I was wondering how does the sender give the encrypted file and the key to the receiver securely? Particularly on situations where the sender doesnt meet with the receiver (through email or through ...
3
votes
1answer
93 views

How should I share the key of the AES algorithm in each client?

My doubt would be the following: How should each client know the encryption key? Using the AES algorithm. (or the best way): Save it in a file encrypted by password? Save it in a DB? Send it over ...
-1
votes
1answer
445 views

is AES-128-CBC already broken?

I just want to know if AES-128-CBC is secure enough to use in an OPENVPN,I asked and they told me AES-128-CBC is completely broken and is considered a weak encryption. is it so?
1
vote
2answers
131 views

Can I use RSA to encrypt an AES256 key that I put at the beginning of my AES256 encrypted file?

I have a master server generating large files for other (known) servers to download. Those files: Are quite big. From 20MB to 5GB. Are written once by the server and then it forgets about them. ...
2
votes
1answer
130 views

AES/Rijndael Encryption Does block size matter for security?

Would AES with a 256-bit block size be more secure than a 128-bit block size? I'm curious if block size really makes something more secure. I'm dealing with a third party to use their API and they ...
1
vote
1answer
103 views

AES Encryption is this overcomplicated encryption?

I'm working with a vendor's API and it recommends the following steps for transmitting an encrypted value: 1) Convert the encryption password to a byte array. 2) Convert the value to be ...
4
votes
4answers
371 views

Can I use a user's password hash as the AES key to make a one time token?

I want to make a one time token that users use to reset their password. The token should be invalidated once it is used, is it safe to use their currently hashed password as the aes key to encrypt the ...
15
votes
5answers
6k views

Can I recover a lost AES key?

I had encrypted 2 MySQL databases with AES_ENCRYPT in ECB 128 bit mode. Now I forgot my encryption key, but I have plain text (I have one database without encryption and same with encryption). How to ...
0
votes
1answer
49 views

Is there any 'Open Enrypted File Container' Format?

Tools that create 'encrypted file containers' use open encryption standards like AES to encrypt container contents, however the container format is proprietary, I am guessing, so need the same tool to ...
0
votes
2answers
93 views

Understand aes cbc IV

When I use AES CBC, the encrypt function needs to get an input-buffer to encrypt + key + IV? Is IV like one more key, or IV is generated by the key (so the encrypt function only needs to get the ...
1
vote
1answer
37 views

Potential security issue with md5 filename

I've been storing files using a filename of the md5 hash of the file. This allows me to not store duplicates of the same file and avoids any filename clashes. Each file has uses a different salt/iv. ...
2
votes
1answer
54 views

How to use login details to make a key for AES encryption and decryption

I have recently starting looking into AES encryption for a side project. I am researching this till now so if there is something wrong about my concept please correct it. According to me If i want to ...
0
votes
1answer
206 views

Decrypt AES 128 CTR with the IVs (counter) but not the key

I have the encrypted files, the random IV for each encrypted files and the counter increment function but I miss the key. Is there anyway for me to decrypt the files?
1
vote
0answers
81 views

Help me understand Encryptpad and 7-zip for encryption

I was looking to encrypt some text files (containing sensitive data) so I could safely keep them online (e.g. Google drive). I have found three options: 7-zip, which does AES-256 Encryptpad, which ...
0
votes
1answer
495 views

OpenSSL: what's the difference between -kfile and -pass?

It seems both -kfile and -pass can be used to encrypt files with a 2048 bit keyfile? I don't understand the difference between the two methods: $ openssl enc -salt -aes-256-cbc -in inputfile.txt -...
3
votes
2answers
581 views

The way to determine IV for AES encryption, possible security problems with this approach

I am trying to make a folder encryption with maximum automation (except password input). Inside a bash script I do the following: echo $RANDOM | md5sum | cut -d' ' -f1 > iv and then using it: ...
1
vote
1answer
60 views

Ensuring key integrity

I have encrypted AES key stored in the database with the encrypted data. AES key is encrypted with a key derived from the passphrase. I want to ensure the integrity of the stored AES key. Is the ...
0
votes
1answer
91 views

Is AES+hash rather than HMAC problematic?

I will now ask a strange question, but bear with me. I can't share the entire usecase, but the point is to allow the holder of a secret key to create "strings" (used in other systems). The strings ...
1
vote
2answers
196 views

AES-256 decryption after key destruction. Possible or not?

Can AES-256 be decrypted if after the encryption process you destroy the key that must be used to decrypt the data, is it possible?
0
votes
1answer
99 views

Advantages of encrypting IV in AES GCM

I've got a friend who stores some important data locally in a database. Before storing, he however first encrypts it with AES GCM with a certain key. He then encrypts the IV with another key, and then ...
1
vote
2answers
379 views

Does using AES-256 encryption really grant any further security?

AES-256, as far as I know, generates an 256 bit key to encrypt a message, and the 256-bit key is generated by a known algorithm starting from the password the user chooses. Since the encryption is ...
0
votes
1answer
115 views

Is AES + MAC more secure than encrypting plaintext along with its hash

Suppose I want to encrypt some plaintext and I can only use an unauthenticated AES mode like CBC. One way of adding authentication is encrypt-then-MAC, where the two different keys for AES and MAC ...
-1
votes
1answer
166 views

What exactly is unsafe in using openssl AES with a password? [duplicate]

An answer about AES encryption starts with a disclaimer: Please note: You can use this to hide birthday-gift-ideas.txt from your roommate, but don't expect it to be secure against a determined ...
0
votes
1answer
214 views

Using AES encryption to generate MAC (and provide authentication/integrity)

Ignoring that there are far better and more standard approaches to providing authentication and integrity guarantees, what (if any) weaknesses would a system as outlined below that relies on AES (AES/...
2
votes
0answers
29 views

Why is MySQL 8.0 AES_ENCODE unsafe for statement-based replication?

I read this interesting note in the MySQL 8.0 documentation that seemed a bit confusing to me: Statements that use AES_ENCRYPT() or AES_DECRYPT() are unsafe for statement-based replication. As I ...
1
vote
1answer
143 views

Storing RSA private/public key pairs in a file, on linux

Would it be wise to: Generate a lot of priv./pub. key pairs, and store them in a file on the server machine(Linux). (Let's say in a companies server room) Then encrypt the file with AES, and store ...
3
votes
2answers
189 views

Is AES easier to crack when the input is small? [closed]

Say you just want to encrypt a number. For example, say the number could be any double. A double in C# and Java is 8 bytes. If you were to encrypt a double using AES: var cypherText = AES.Encrypt(...
1
vote
1answer
26 views

How harmfull might be predictable bytes when using AES-CTR

I use AES-CTR to perform on the fly encryption of packets. Each packet is 16 bytes long, however, depending on what is being transferred, the 16 bytes may not be used. So far, unused bytes are left to ...