Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

Filter by
Sorted by
Tagged with
2
votes
2answers
59 views

With AES, does key format make a difference to security?

For context, I'm assuming the attacker knows the format of the key. Do these two keys have the same strength, or by leaving the hyphens in the key am I reducing the security by a partly-known-key ...
0
votes
1answer
34 views

On what basis to create Data Keys

For PII, we have to encrypt some columns in our DB(All of our infra resides on our own DC, not using any cloud provider). Now roughly what we are doing is Created a CMK at AWS. Generate Data Key ...
0
votes
1answer
61 views

Symmetric encryption - given plain text, produce cipher text without key

Suppose Alice and Bob are communicating using a peer-reviewed symmetric encryption algorithm such as AES-256. Bob possesses a private encryption key to decode messages from Alice, but Alice does not ...
1
vote
1answer
70 views

How to perform encryption/decryption in a RESTful system?

I'm not a crypto/security expert and have designed an architecture for encryption/decryption. I'm not sure if its full proof and want to know what people use as industry standard? I'm trying to ...
0
votes
0answers
43 views

Review of the design of Credentials Manager app

I want to make a mobile app that will act as a Credentials Manager and store all my access information for websites, credit cards, secure notes, and so on on the server encrypted with REST API. The ...
0
votes
0answers
56 views

How to securely design REST API for Password Manager app?

I want to create Password Manager where users can create their accounts and store website passwords. For the frontend, it will be a mobile app, but I need REST API as the backend data where the data ...
0
votes
0answers
49 views

how to encrypt and decrypt messages with more than one sender and more than one receiver?

I am creating a chat app. This app contains private messages and channels. These channels include more than one user. I want to encrypt messages using AES and to transfer the AES key to users of this ...
0
votes
1answer
49 views

Establishing safe connection in Java

In my Java project I'm trying to create a 100% secure method of communication between the method and the client. I used to use this process: Client: generates 4096-bit RSA keypair Client: sends public ...
3
votes
2answers
1k views

RSA key exchange

I want to create a message exchange program. These messages are encrypted with the AES key, and this key is encrypted using the RSA algorithm. When I send a message from User 1 to User 2, I need to ...
0
votes
1answer
61 views

Where and how to store admin account credentials for enterprise systems?

To my understanding, password-protected spreadsheets are not best practice for storing admin creds, whether it's a company of 5 people or a company of 50,000 people. In such a case, what are some best ...
1
vote
0answers
82 views

Vault app corrupted my important files: AES encryption [closed]

I downloaded a calculator app by FishNet on Google play, it was an app where you can store media files in an app disguised as a calculator and can only be accessed by typing a passcode into the app. ...
0
votes
0answers
64 views

Reused key issue in Asymmetric Encryption

We all hear often about the reused key issue in block cipher. For example, for a picture being encrypted by the electronic codebook mode, we will still see the shape of the picture. https://images.app....
0
votes
0answers
50 views

Is there a standard approach for serializing an RSA encrypted AES key alongside the AES payload itself?

Diffie-Hellman won't really work here, since only one side has a public key, one side has the private. It must be this way to prevent decryption when the data is at-rest on one of the sides before ...
0
votes
1answer
108 views

Performance comparison between ed25519 vs AES

I found that AES has dedicated hardware on most machines. The question is can we use ed25519 to replace AES? Instead of using RSA to encrypt the AES key and then encrypt the data with AES, can we just ...
2
votes
0answers
77 views

Is AES statistically noise? Reliably so?

Suppose we want to store files in a way that has plausible deniability. Ie. we can deny the existance of those files. The approach is this: We allocate (or just use) a chuck of disk an initialize it ...
2
votes
2answers
80 views

Password relevance in key derivation function

I'm questioning the password used in a key derivation function, whether It makes sense to make it unique for every generated symmetric key and why
0
votes
0answers
33 views

PyCrypto based encrypted Property class for Google App Engine standard - is this AES implementation secure

I have a need to encrypt OAuth access and refresh tokens stored in the Google Cloud Datastore. The goal here is to ensure that if the Datastore entities are accessed independently of the code, the ...
0
votes
0answers
37 views

Is there any point in using a non-null IV for AES-GCM if the key is only used once?

I understand that re-using a key without a unique IV is a deadly sin, but what if there‘s the guarantee that the key is only used for encrypting and decrypting one dataset? I was thinking about ...
1
vote
0answers
38 views

Format for data & key exchange/storage [duplicate]

Is there a standard format for storing/exchanging encrypted data along with the key needed to decrypt it (data is encrypted with a single use symmetric key and the symmetric key itself is encrypted ...
0
votes
1answer
101 views

AES-256 ESSIV in dm-crypt

I am playing around with disk encryption. https://gitlab.com/cryptsetup/cryptsetup/-/wikis/DMCrypt#iv-generators says: essiv: "encrypted sector|salt initial vector", the sector number is encrypted ...
0
votes
0answers
40 views

Data integrity when AES key can be modified

I found a client-server application where the server creates a random AES-256-CBC key, and gives this key to the client for use as an authentication token. The key is used on the server to encrypt a ...
0
votes
3answers
161 views

DTLS vs direct use of AES. What are the threats unique for direct use of AES instead of DTLS?

For regular traffic in mesh network (between Internet of Thing devices) customer decided to use one of two options: DTLS PSK ciphersuite - DTLS based on pre-shared symmetric key or direct use of AES -...
1
vote
1answer
145 views

Does MEGA store my password or decryption key? How do they check the login information I entered is correct or not?

Does MEGA store my password or decryption key? How do they check if the login information I enter is correct while only my email address is sent to the server? I read this article: How can mega store ...
0
votes
1answer
86 views

AES encryption (in Java) of different JSON strings always produce same encrypted string as result. Why? [closed]

I have a program written in Java which takes JSON string as argument, encrypts it using AES then encodes it using Base64. JSON string is like: {"a": "b"} or {"a": "n"} or {"a": "k"} I.e related ...
-1
votes
2answers
126 views

Encrypt files without leaving a hint of the encryption algorithm used [closed]

I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
0
votes
0answers
71 views

Is AES ECB mode safe for one block Encryption then MAC with same key?

I want to do something really basic but I need to be sure that the process is safe : Problem Alice and Bob have to agree on a secret 6 digits PIN. They each have a pre-shared aes symetric key k and ...
1
vote
1answer
94 views

Does knowing part of the key make encryption weaker?

I am asking specifically about AES CBC mode. Is it safe to assume that an encryption key of length X with N characters known by an attacker is just as secure as a key of length X − N? For example, ...
1
vote
1answer
73 views

security of AES where attacker can ask secure code to decrypt arbitrary cypher-text

A service or library provides a function decrypt( user_id, cypher_text) and gives back plain text. Internally to the function it loads an AES key from a secure vault, decrypts the cypher_text, and ...
0
votes
2answers
143 views

Save private key in a database to share between multiple accounts

I don't know if my concept would be secure so I ask here. The main purpose is to log in with password x and also use that password to encrypt an RSA private key with AES to store that in the main ...
0
votes
0answers
38 views

What is known about the strength or weakness of the PBEWITHSHA256AND128BITAES-CBC-BC algorithm?

Is PBEWITHSHA256AND128BITAES-CBC-BC known to be outdated or is it considered robust? Is it sufficient in applications that need to protect PII? Thanks.
3
votes
3answers
120 views

Are encrypted databases secure against all attacks?

If I use a database encryption package for oracle like dbms_crypto, would this be vulnerable to any attacks? I know that it uses algorithms like 3DES, AES, etc. These are all thigns that you can use ...
0
votes
2answers
54 views

Can GET Requests with Spring Rest controllers be intercepted by attackers?

I'm building a Spring app and a React app which also contains Chat functionality. I use WebSocket with RabbitMQ as message broker. I store the chat history as encrypted messages with AES, and before ...
2
votes
1answer
76 views

Is AES the recommended symmetric cipher for production level software?

I was considering developing an application level software for file encryption after stress testing many of my implementations of popular symmetric ciphers. I would love to support multiple ...
1
vote
3answers
108 views

Does WPA2 use TKIP or not?

I am writing my master's thesis about WLANs, and there is something what I don't really understand. This may be a dumb question but I didn't find a clear explanation. WPA uses encryption TKIP. WPA2 ...
0
votes
1answer
122 views

CTR: Why not XOR before AES

I just learned AES-CTR. I am wondering about the security of the CTR mode. It is basically an AES of the nonce with an XOR-Encryption at the end. Are this 2 assumptions correct? The nonce doesn't ...
1
vote
1answer
83 views

Integrity attacks and encryption at rest

The AES-GCM algorithm provides not only confidentiality but also integrity. I understand that integrity is an important part of security in overall, but whenever I think in terms of possible attacks, ...
2
votes
2answers
352 views

AES-256-GCM using GnuPG

Is there a way to encrypt files with AES 256 in the authenticated GCM mode using GPG? I don't see GCM in supported cipher modes. It seems that the GPG uses only one mode (its own modification of CFB)...
0
votes
0answers
58 views

Best approach to encrypt files on servers with AES-128

If you have the follows requirements: a list of files on the server file system to be encrypted / decrypted a database table named T_FILE_REPO in which the files are registered (id, name, ...) a ...
-1
votes
1answer
159 views

Recover AES256 zip password by known result

I have a zip file containing unencrypted folder with encrypted files inside. Given that for some files I have their originals, is it possible to restore password used for encryption?
0
votes
0answers
107 views

Securely encrypt and decrypt files via PBE in Java (Jasypt seems insecure)

This post has been MOVED to StackOverflow due to lack of answers on Info Security: https://stackoverflow.com/questions/60960802/securely-encrypt-and-decrypt-files-via-pbe-in-java-jasypt-seems-...
1
vote
1answer
83 views

PDF User Password always give access to the Owner Password, even when encrypted with AES-128

I've been messing around with qpdf, and noticed something that seems huge: that a document's Owner Password is essentially useless, as it can be easily unset, and therefore that only the User Password ...
0
votes
0answers
78 views

How to decrypt XML encrypted as per FATCA IDES standard?

My former colleagues have encrypted an XML file as per FATCA-IDES standard: Digitally signed the XML payload (using "enveloping" signature and create SHA2-256 hash) RSA digital signature using the ...
0
votes
0answers
71 views

Are Mac OSX encrypted volumes to be trusted(from Disc utility)

I am currently using mac os disc utility on mac and normally create a 10GB encrypted image to store my random private files in... What really makes me paranoid is how fast or shall we say that it ...
-3
votes
1answer
1k views

Write a Python or C program to guess the key [closed]

Key generation program in C: #include <stdio.h> #include <stdlib.h> #include <time.h> #define KEYSIZE 16 void main() { int i; char key[KEYSIZE]; printf("%lld\n", (long long) ...
1
vote
1answer
88 views

Recover password of ZIP archive, having its decrypted and extracted content

Can I recover a password of an AES-encrypted ZIP if I know its extracted & decrypted content? The archive contains two files protected with two different passwords.
0
votes
0answers
89 views

How to crack rar file with protected pass with only the AES-256 key?

I have rar with protected pass.But I have the AES-256 key can I crack it and if I can. how?
1
vote
2answers
226 views

PBKDF2 hash over PBKDF2 key derivation

Imagine an app where any user provides a username and a password. This password is used to generate a 'strong' encryption key (for AES encryption) with the PBDKF2 key derivation algorithm. This ...
13
votes
3answers
1k views

How does Widevine, FairPlay, and other DRM's work under the hood?

I am trying to understand how DRM works under the hood. There doesn't seem to be much information about it on the web so I figured I would ask here. After some attempted research, I found it ...
3
votes
2answers
536 views

Are ECB and CBC modes of operation generally insecure?

In some Java code that I'm reading, I stumbled over the following encryption algorithms passed to the Cipher.getInstance(...) method: AES/CBC/PKCS5Padding DESede/ECB/PKCS5Padding RSA/ECB/PKCS1Padding ...
11
votes
1answer
435 views

What gpg defaults can be improved, when performance is not an issue?

gpg has some preset default settings, which I assume were selected as a compromise between speed and security. I understand that these are good enough for most people. But, in a situation where speed ...

1
2 3 4 5
16