Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

Is it possible to hack encrypted external HDD,if you have access to it? [duplicate]

If I lose my external HDD and somebody finds it and tries to hack, will he succeed?Is it possible to get data from encrypted disk by disassembling it and working with platters? HDD is APFS AES 256 ...
0 votes
1 answer
95 views

Is it safe to store data on APFS 256 AES encrypted external HDD disk?

I'm using a MacBook and want to store confidential data (financial documents, passwords, private photos, etc.) on an external HDD disk. How safe is setting up APFS AES 256 encryption with disk ...
0 votes
1 answer
55 views

Probability of getting different plaintext with different key

What is the probability that an AES encrypted file, using a wrong password, gets decrypted to something different than the plaintext, but which could still be likely to be interpreted an the true ...
  • 15.4k
2 votes
1 answer
120 views

CryptoJS AES encryption/decryption problem

A simple encryption/decryption using CryptoJS gives me a weird output. Can anyone point me to where the code is wrong? (I'm looking for the output in the console) var code = "Testcode"; var ...
  • 23
0 votes
1 answer
38 views

Is having a seperate server to handle encryption operations a secure way to protect a private key for a web application?

Assume I have two servers which are part of a production environment for a web application which handles sensitive user data. The first server is a ruby on rails application, and the second is a ...
  • 236
1 vote
1 answer
114 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
-1 votes
2 answers
159 views

Is possible to reverse engineer a AES encryption of a known file format?

If the encrypted file is from one of the known formats, such as doc, jpg, mp3, etc., is it possible to reverse engineer it and decrypt it? I "roughly" know the mechanic behind the AES ...
2 votes
0 answers
42 views

Kaspersky Total Security Data Vault encryption AES256 BUT with "effective key-length 56bit"

While comparing Kaspersky Total Security (KST) with Kaspersky Internet Security (KIS). One of the "extras" of KTS is the added "feature" of "Data Vaults", which "...
-2 votes
1 answer
112 views

AES - Is it sensitive to let anyone encrypt a message only you can decrypt?

I have an application in which some data can be encrypted through AES. Such data can emanate from multiple sources I may not know. For practical reasons I want those sources to be able to encrypt ...
1 vote
1 answer
90 views

Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?

In Tor, when a client communicates with an entry node, they exchange the parameters such as the prime number and the generator with each other through DH. What about when an entry node communicating ...
1 vote
3 answers
186 views

AES Encryption vs hash function with the strong assumption of input size and secure key?

There are plenty of questions about the difference between AES encryption and hash functions. I read some of them and the general answer is that AES is reversible as long as the key is exposed. AES ...
  • 11
0 votes
1 answer
51 views

Soundex and encryption : good friend?

We are considering using the Soundex algorithm to improve our search capabilities in our app. Our app data are encrypted in the DB. (EAS256) The Soundex result will be stored in clear next to our ...
0 votes
0 answers
23 views

Can a AES 256 key be recovered with the encrypted and decrypted message? [duplicate]

I have no advanced knowledge in cryptography. Is it possible to recover the AES-256 key with the decrypted and encrypted message?
  • 101
1 vote
0 answers
28 views

Why is it not a good idea to simply encrypt the plaintext with the receiver’s public key? [duplicate]

What are some of the risks when encrypting "plaintext" with a receiver's public key? I have been Googling for hours, and been reading in the Computer Security Principles and Practice 3rd ...
15 votes
5 answers
3k views

Pseudorandom vs. True Random

Proper security algorithms demand true random numbers. For instance, secret keys & initialization vectors should never not be true random. However, generating numbers using Java's Random library ...
0 votes
1 answer
113 views

How does a Cipher Suite Work without an Asymmetric Algorithm? [closed]

Using the cipher suite “TLS_AES_128_CCM_SHA256” This example is referring to a self signed certificate If a server uses TLS and uses the cipher suite above? How does the certificate get signed if ...
  • 1
0 votes
2 answers
77 views

Is it possible to eavesdrop HTTPS encryptions by file size?

I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when ...
  • 101
0 votes
1 answer
76 views

Ownership proof scheme

I'm developing a device that will require ownership proof to activate HOTP authorizations. The HOTP codes will be used in the BLE bonding between the device and the owner's phone. I came up with the ...
  • 3
0 votes
0 answers
212 views

File encryption with Python and AES

I need to write a Python script to occasionally encrypt some small text files (~10 Kb) in order to store them in an insecure environment. Each file will be encrypted via unique symmetric key and AES ...
  • 1
5 votes
1 answer
224 views

Design of a web based password vault

I'm designing a password vault that's accessible to clients through an existing web application. The clients are small, (and mostly non-technical) businesses that aren't using password managers, but ...
4 votes
2 answers
293 views

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

I would like to know what encryption 1Password uses. On the About the 1Password security model page, it says: Your 1Password data is kept safe by AES-GCM-256 authenticated encryption. The data you ...
  • 143
0 votes
2 answers
116 views

How to be sure there are only encrypted data on my backend

I am coding an online password manager as part of my apprenticeship. I have already coded the full backend to synchronize the encrypted data and a frontend that encrypts and decrypts data with AES. So ...
12 votes
2 answers
4k views

Do I need to use TLS if data is already encrypted and gets decrypted client-side?

We are serving static content over the internet, and have a business requirement that the data must be encrypted at rest. Currently it is stored in AWS S3, where it can be accessed by authorized ...
  • 131
0 votes
0 answers
77 views

Step-by-step file encryption/decryption using user-supplied password

Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
  • 101
0 votes
1 answer
170 views

How to encrypt/store private key, if login is with biometrics/OTP/Sign in with Google

I am creating a cross-platform application, in which I am encrypting all data using AES-GSM. So my problem is that I want to store private keys locally on the user's device (either Android, IOS, Web, ...
  • 103
0 votes
1 answer
290 views

Intercepting responses using mitmproxy in Python. Problem in decryption

I have set up MitmProxy with a Python script to intercept network responses from one domain, used by a Desktop App. However, when I start up the App, I get the following series of transactions { &...
0 votes
1 answer
280 views

Can aes256 be cracked with math.random

I read this https://medium.com/@betable/tifu-by-using-math-random-f1c308c4fd9d and if the key is generated with an old browser using math.random via chrome v8, could the AES encrypted message be ...
  • 1
0 votes
1 answer
107 views

Is there any benefit to encrypting a derived key?

I'm working on updating the encryption method of a class at work. The encrypt and decrypt methods take the text to encrypt/decrypt and a string which used to be used as a salt (this string is ...
  • 1
0 votes
1 answer
227 views

What is the best way to encrypt extremely sensitive and important data

I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines. I understand ...
  • 781
0 votes
0 answers
123 views

What is more secure: encrypting individual files in archive or encrypting the archive itself?

Let's assume we have symmetric crypto with the same IV for each operation. From my perspective, encrypting the whole archive is better, as similar strings are compacted and the CBC will work for us ...
  • 101
0 votes
0 answers
161 views

Specification of AES-based PKCS#5 Password-Based Encryption (PBE)

recently I had a look at the capabilities of the Java keytool to create PKCS#12 containers with a protected private key. According to the standard a private key is protected using a PKCS#8 shrouded ...
2 votes
1 answer
675 views

AES256 - 7zip Vs GPG

I noticed that 7zip provides an option to encrypt the contents of a folder using AES256 (Screenshot Below) and so does GPG using this command: gpgtar --output <Name_Of_The_Output_File> -v --...
  • 606
2 votes
1 answer
204 views

Use pre-computed PBKDF2 key with high iteration count as password

We provide web redirection based integration with our partners' web apps. The flow is something like the following, and the password is generated randomly and shared with them during the onboarding ...
0 votes
1 answer
327 views

How are AES-256 keys generated using hardware random number generator?

I know about key derivation functions such as PBKDF2 which derive keys from passwords. That said, I am having hard time wrapping my mind around how AES-256 keys are generated using hardware random ...
0 votes
1 answer
146 views

Are AES-256 keys essentially unsigned integers between 0 and 2^256-1 padded with zeros?

I know about key derivation functions such as PBKDF2 which derive keys from passwords. Am I wrong in assuming AES-256 keys are essentially unsigned integers between 0 and 2^256-1 padded with zeros?
2 votes
1 answer
187 views

How to convert passphrase to AES256 key?

My plan is to convert a passphrase in UTF-8 ASCII-US to Unit8Array(32) then use it in: 256bitsKey = Unit8Array(32) from passphase iv = window.crypto.getRandomValues(new Uint8Array(32)); CryptoJS.enc....
1 vote
1 answer
165 views

AES-256 without key stretching

It is not so difficult to create a password which is exactly 32 characters long. In this question - AES-256 Key Length Importance @Marc writes: you absolutely should not be using a password as the ...
  • 359
1 vote
1 answer
784 views

AES-256-GCM transfer IV and AuthTag

Question is for transfer encrypted data between two services (Like HTTP, GRPC or etc...) Can I transfer IV and AuthTag in plain, Is this approach secure? I have sample code in Node.js and I'm not ...
  • 113
1 vote
1 answer
439 views

How safe is AES 256bitkey encoded in HEX, Base64?

I am using CryptoJS AES 256 encryption: CryptoJS.AES.encrypt(realData, generateKey(passphrase), {iv: iv}); The secret is generated through: function generateKey(passphrase) { const salt = CryptoJS....
0 votes
1 answer
106 views

If I use multiple different RSA public keys to encrypt a single AES key for distribution, how much does that degrade the encryption?

I would like to store encrypted AES-256 keys in a public location and give 100 different people access to the AES key by using each of those 100 people's public RSA encryption key to encrypt the AES ...
1 vote
1 answer
697 views

Can I get AES CBC key from known plaintext, ciphertext, iv? [duplicate]

Long story short: I was using AES CBC PKCS5 on my image server, but I lost my keys (one key per image). I know the first 61 bytes (the original and the encrypted) of each image plus I know the IV, and ...
0 votes
1 answer
381 views

How to correctly convert a bit key to string for aes 256 encrytion?

I am using CryptoJS AES 256 encryption: CryptoJS.AES.encrypt(string, secret); The secret is generated through: function generateKey(str) { const salt = CryptoJS.lib.WordArray.random(128 / 8); ...
1 vote
1 answer
116 views

IV generation with RNGCryptoServiceProvider

I'm using RNGCryptoServiceProvider.GetBytes(new byte[16]) to generate IV's to use in AES (256 bits) encryption. For every record I encrypt, I generate a new IV. I'm also prepending each of these IV's ...
2 votes
2 answers
506 views

Nonce in Aes-gcm AAD

I have some data which I'm encrypting using Aes-Gcm. Every time I have to encrypt the data, I generate a random nonce of the appropriate size, as well as an empty array for the tag data. In Aes-Gcm, ...
0 votes
2 answers
117 views

Does using subkeys provide better protection in this instance?

I was thinking of implementing the following scheme for encryption of many independent files: From the password, which is given by the user, generate a master key using for example HMAC-SHA. From ...
0 votes
1 answer
497 views

Reusing the IV, but not the key

There are a few questions on this site asking about reusing the same initialization vector for example for AES encryption under the same key, see for example this question. Now, let's not respect that ...
3 votes
2 answers
1k views

Why encrypting with ECB block cipher mode provides different result?

I'm playing around with openssl command line to verify my understanding on block cipher mode. I read that ECB block cipher mode always encrypt the same text to the same output. AES operates on 16 ...
  • 133
0 votes
1 answer
1k views

7z "Copy 7zAES" algo brute force with 32 char password for when original file is available (QNAP QLocker ransomware) [duplicate]

As some in here might know, there is/was a ransomware attack going on worldwide that used 7z to encrypt all files <20MB for a ton of users world wide. Each user has a unique 32 char password (Upper ...
1 vote
3 answers
135 views

In Algorithm: dh-ietf1024-sha256-aes128-cbc-pkcs7 where to get the IV?

I'm implementing dh-ietf1024-sha256-aes128-cbc-pkcs7 in golang and according to documentation I've managed to create the 128-bit key appropriate for AES (from my 1024-bit shared-key computed from my ...
  • 306
0 votes
0 answers
853 views

How to save AES Key in PEM file

I'd like to store a private symmetric key, aes-256, in a PEM file. My understanding is that usually these types of keys are derived using RSA/EC DH and there's no need to save them, but in my ...

1
2 3 4 5
17