Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

0
votes
0answers
28 views

SQL Server, aes_256 without salt [on hold]

I need to used an agnostic encryption. Is it possible to use encryption in SQL server 2017 column? and how do I disable the salt in with aes_256?
0
votes
0answers
79 views

XML decryption with private key [closed]

I'm trying to understand how xml encryption is working. As much as I've already learned is that usually encryption.xml states which resources are encrypted + it has CipherValue. Cipher value is a ...
1
vote
1answer
38 views

Decrypting gpg2-symmetrically-encrypted files using non-gpg2 tools

If I encrypt a file using gpg2 and specifying AES256 as my encryption algorithm, can I decrypt it with tools other than gpg2? More generally, does the fact that one tool used AES256 for encrypting a ...
1
vote
2answers
90 views

Is AES-256 not the best decision for mantaining performance in a Datalake?

I'm worried about performance in a Data Lake used for Data Science purposes. I need to encrypt confidential data and, because of definitions I won't dive into here, the algorithm to fulfill this ...
-1
votes
1answer
59 views

want to know best way to my case is to encrypt the UART communication channel? [closed]

I have device connected to scooter it’s 4- wire uart communication. My fear is some can read the ascii data and send the at commands and unlock my scooter and steal the scooter. I want to secure the ...
0
votes
0answers
81 views

How to enable hardware encryption of intel ssd 660p 1TB?

How to enable hardware encryption of my intel ssd 660p 1TB? I can't find any useful information on the internet. I hope that the encryption function can be used for theft prevention. That is to say, ...
1
vote
0answers
68 views

Is GPG's AES encryption that much stronger than its RSA headers? [duplicate]

Correct me if I'm wrong at any point of this questino. I understand that AES is a lot cheaper to compute than RSA (or any form of asymmetric encryption) and that that is why GPG and similar programs (...
2
votes
0answers
63 views

DES/AES invertibility [migrated]

My professor has posted a couple of practice questions that so far I haven't been able to find the answer for and I was hoping you could help. DES would remain invertible—it would still be ...
1
vote
1answer
91 views

AES, RSA, ECC Key size [closed]

It is generally said that 2048-bit RSA keys are roughly equivalent to 112-bit symmetric keys and 2048-bit RSA keys are "sufficient for commercial use until around the year 2030" (https://security....
1
vote
1answer
78 views

How to combine symmetric and asymmetric encryption to encrypt large files?

I understand that it is possible to combine symmetric and asymmetric encryption in a way that makes use of the performance of symmetric encryption, and also getting the benefits of being able to ...
0
votes
1answer
44 views

Why is authentication impossible with CBC mode?

Suppose I have a protocol where fixed-length messages (1280 bytes, no padding) are encrypted with AES in CBC mode. I want to put some data in the message body to verify that the message is authentic. ...
15
votes
2answers
2k views

What is the impact of the reported weak IV in 7 Zip?

It has been reported that 7 Zip generates IVs in the weak manner. What is the actual impact of this? I'm asking about historical Zip files that I've sent. I've no plans to use 7 Zip going forward ...
0
votes
1answer
30 views

Can Honey Encryption be used for CAN bus security? [closed]

AES encryption was one of the best encryption techniques used but it had a major disadvantage that it cannot handle brute force attack. Hence honey encryption was introduced which can handle brute ...
0
votes
1answer
98 views

AES Keys Storage for encrypting hashes of SAM file in Windows 10

Hashes of user account passwords in Windows 10 (like in older versions) are stored in SAM file. Using standard utility pwdump 7 for getting these hashes gives following result: ::LM hash : NTLM hash ...
0
votes
2answers
72 views

How long is Key lifetime of AES-GCM key?

As I know the AES-GCM used a nonce and if the two message has the same nonce then the secret key can be retrieved. If two computers use the AES-GCM to encrypt exchange messages, then what is the key's ...
-1
votes
1answer
57 views

How does key exchange work? Using symmetric algorithm such as AES

I was wondering how does the sender give the encrypted file and the key to the receiver securely? Particularly on situations where the sender doesnt meet with the receiver (through email or through ...
3
votes
1answer
87 views

How should I share the key of the AES algorithm in each client?

My doubt would be the following: How should each client know the encryption key? Using the AES algorithm. (or the best way): Save it in a file encrypted by password? Save it in a DB? Send it over ...
-1
votes
1answer
229 views

is AES-128-CBC already broken?

I just want to know if AES-128-CBC is secure enough to use in an OPENVPN,I asked and they told me AES-128-CBC is completely broken and is considered a weak encryption. is it so?
1
vote
2answers
127 views

Can I use RSA to encrypt an AES256 key that I put at the beginning of my AES256 encrypted file?

I have a master server generating large files for other (known) servers to download. Those files: Are quite big. From 20MB to 5GB. Are written once by the server and then it forgets about them. ...
2
votes
1answer
113 views

AES/Rijndael Encryption Does block size matter for security?

Would AES with a 256-bit block size be more secure than a 128-bit block size? I'm curious if block size really makes something more secure. I'm dealing with a third party to use their API and they ...
1
vote
1answer
101 views

AES Encryption is this overcomplicated encryption?

I'm working with a vendor's API and it recommends the following steps for transmitting an encrypted value: 1) Convert the encryption password to a byte array. 2) Convert the value to be ...
4
votes
4answers
348 views

Can I use a user's password hash as the AES key to make a one time token?

I want to make a one time token that users use to reset their password. The token should be invalidated once it is used, is it safe to use their currently hashed password as the aes key to encrypt the ...
15
votes
5answers
6k views

Can I recover a lost AES key?

I had encrypted 2 MySQL databases with AES_ENCRYPT in ECB 128 bit mode. Now I forgot my encryption key, but I have plain text (I have one database without encryption and same with encryption). How to ...
0
votes
1answer
46 views

Is there any 'Open Enrypted File Container' Format?

Tools that create 'encrypted file containers' use open encryption standards like AES to encrypt container contents, however the container format is proprietary, I am guessing, so need the same tool to ...
0
votes
2answers
71 views

Understand aes cbc IV

When I use AES CBC, the encrypt function needs to get an input-buffer to encrypt + key + IV? Is IV like one more key, or IV is generated by the key (so the encrypt function only needs to get the ...
1
vote
1answer
35 views

Potential security issue with md5 filename

I've been storing files using a filename of the md5 hash of the file. This allows me to not store duplicates of the same file and avoids any filename clashes. Each file has uses a different salt/iv. ...
2
votes
1answer
52 views

How to use login details to make a key for AES encryption and decryption

I have recently starting looking into AES encryption for a side project. I am researching this till now so if there is something wrong about my concept please correct it. According to me If i want to ...
0
votes
1answer
120 views

Decrypt AES 128 CTR with the IVs (counter) but not the key

I have the encrypted files, the random IV for each encrypted files and the counter increment function but I miss the key. Is there anyway for me to decrypt the files?
1
vote
0answers
77 views

Help me understand Encryptpad and 7-zip for encryption

I was looking to encrypt some text files (containing sensitive data) so I could safely keep them online (e.g. Google drive). I have found three options: 7-zip, which does AES-256 Encryptpad, which ...
0
votes
1answer
328 views

OpenSSL: what's the difference between -kfile and -pass?

It seems both -kfile and -pass can be used to encrypt files with a 2048 bit keyfile? I don't understand the difference between the two methods: $ openssl enc -salt -aes-256-cbc -in inputfile.txt -...
3
votes
2answers
551 views

The way to determine IV for AES encryption, possible security problems with this approach

I am trying to make a folder encryption with maximum automation (except password input). Inside a bash script I do the following: echo $RANDOM | md5sum | cut -d' ' -f1 > iv and then using it: ...
1
vote
1answer
59 views

Ensuring key integrity

I have encrypted AES key stored in the database with the encrypted data. AES key is encrypted with a key derived from the passphrase. I want to ensure the integrity of the stored AES key. Is the ...
0
votes
1answer
88 views

Is AES+hash rather than HMAC problematic?

I will now ask a strange question, but bear with me. I can't share the entire usecase, but the point is to allow the holder of a secret key to create "strings" (used in other systems). The strings ...
1
vote
2answers
180 views

AES-256 decryption after key destruction. Possible or not?

Can AES-256 be decrypted if after the encryption process you destroy the key that must be used to decrypt the data, is it possible?
0
votes
1answer
84 views

Advantages of encrypting IV in AES GCM

I've got a friend who stores some important data locally in a database. Before storing, he however first encrypts it with AES GCM with a certain key. He then encrypts the IV with another key, and then ...
1
vote
2answers
270 views

Does using AES-256 encryption really grant any further security?

AES-256, as far as I know, generates an 256 bit key to encrypt a message, and the 256-bit key is generated by a known algorithm starting from the password the user chooses. Since the encryption is ...
0
votes
1answer
104 views

Is AES + MAC more secure than encrypting plaintext along with its hash

Suppose I want to encrypt some plaintext and I can only use an unauthenticated AES mode like CBC. One way of adding authentication is encrypt-then-MAC, where the two different keys for AES and MAC ...
-1
votes
1answer
130 views

What exactly is unsafe in using openssl AES with a password? [duplicate]

An answer about AES encryption starts with a disclaimer: Please note: You can use this to hide birthday-gift-ideas.txt from your roommate, but don't expect it to be secure against a determined ...
0
votes
1answer
160 views

Using AES encryption to generate MAC (and provide authentication/integrity)

Ignoring that there are far better and more standard approaches to providing authentication and integrity guarantees, what (if any) weaknesses would a system as outlined below that relies on AES (AES/...
2
votes
0answers
26 views

Why is MySQL 8.0 AES_ENCODE unsafe for statement-based replication?

I read this interesting note in the MySQL 8.0 documentation that seemed a bit confusing to me: Statements that use AES_ENCRYPT() or AES_DECRYPT() are unsafe for statement-based replication. As I ...
1
vote
1answer
118 views

Storing RSA private/public key pairs in a file, on linux

Would it be wise to: Generate a lot of priv./pub. key pairs, and store them in a file on the server machine(Linux). (Let's say in a companies server room) Then encrypt the file with AES, and store ...
3
votes
2answers
188 views

Is AES easier to crack when the input is small? [closed]

Say you just want to encrypt a number. For example, say the number could be any double. A double in C# and Java is 8 bytes. If you were to encrypt a double using AES: var cypherText = AES.Encrypt(...
1
vote
1answer
26 views

How harmfull might be predictable bytes when using AES-CTR

I use AES-CTR to perform on the fly encryption of packets. Each packet is 16 bytes long, however, depending on what is being transferred, the 16 bytes may not be used. So far, unused bytes are left to ...
1
vote
0answers
43 views

What is this key management scheme called

We are building a system, where the messages between services is encrypted with Data Encryption Key (DEK). The DEK is attached to the message, but encrypted with another key, Key Encryption Key (KEK)....
0
votes
0answers
38 views

User specific AES-256 key for file. Retroactive encryption

I may be falling into a classic encryption-problem trap here... I've been developing applications using AES and public/private key encryption for some time so I have a good understanding of straight ...
1
vote
1answer
122 views

Is it possible to encrypt a file using both AES-256 cipher, password and keyfile using OpenSSL?

Is it possible to encrypt a file using both AES-256 cipher, password and keyfile using OpenSSL? I want to encrypt a file using OpenSSL. After hours of testing I have found a command which may ...
1
vote
0answers
114 views

Javascript asymmetric password-based encryption

I want to code a web app that allows 2 users to send encrypted messages to each other, and I want to maximize security, so I want to minimize the amount of trust I put in my cloud provider (both the ...
2
votes
1answer
67 views

Is there any need for PBKDF2 with AES when using a uniform key space?

I'm looking at some code that encrypts data in a database using AES. Before doing so, the encryption key is passed through a PBKDF2 function. Reading up on this, it appears this is for when the key ...
-1
votes
1answer
203 views

OpenSSL how to get the speed od AES-128 from the results I got

so first what do these values stand for are they cycles per 3 seconds? and can I how can I get the speed from these results for AES-128 ? $pi@raspberrypi:~/iot_c3 $ openssl speed aes-128-cbc Doing ...
4
votes
2answers
171 views

Is it safe to encrypt my password with the password itself?

I'm using a password to encrypt some data. However, upon decrypting, I want to check if the entered password is correct. In order to do so I encrypt the password itself. Then upon decrypting, I check ...