Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

Filter by
Sorted by
Tagged with
0
votes
1answer
37 views

AES encryption (in Java) of different JSON strings always produce same encrypted string as result. Why?

I have a program written in Java which takes JSON string as argument, encrypts it using AES then encodes it using Base64. JSON string is like: {"a": "b"} or {"a": "n"} or {"a": "k"} I.e related ...
-1
votes
2answers
110 views

Encrypt files without leaving a hint of the encryption algorithm used [closed]

I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
0
votes
0answers
43 views

Is AES ECB mode safe for one block Encryption then MAC with same key?

I want to do something really basic but I need to be sure that the process is safe : Problem Alice and Bob have to agree on a secret 6 digits PIN. They each have a pre-shared aes symetric key k and ...
-2
votes
0answers
41 views

How to find IV when key, plaintext and encrypted text is given?

I am newbie in AES, so I started to read about its pros and cons. WHEN I read that using same IV is discouraged, I wondered WHY? While searching about it I found that it can be Easily found out by a ...
1
vote
1answer
83 views

Does knowing part of the key make encryption weaker?

I am asking specifically about AES CBC mode. Is it safe to assume that an encryption key of length X with N characters known by an attacker is just as secure as a key of length X − N? For example, ...
1
vote
1answer
62 views

security of AES where attacker can ask secure code to decrypt arbitrary cypher-text

A service or library provides a function decrypt( user_id, cypher_text) and gives back plain text. Internally to the function it loads an AES key from a secure vault, decrypts the cypher_text, and ...
0
votes
2answers
47 views

Save private key in a database to share between multiple accounts

I don't know if my concept would be secure so I ask here. The main purpose is to log in with password x and also use that password to encrypt an RSA private key with AES to store that in the main ...
0
votes
0answers
31 views

What is known about the strength or weakness of the PBEWITHSHA256AND128BITAES-CBC-BC algorithm?

Is PBEWITHSHA256AND128BITAES-CBC-BC known to be outdated or is it considered robust? Is it sufficient in applications that need to protect PII? Thanks.
2
votes
3answers
106 views

Are encrypted databases secure against all attacks?

If I use a database encryption package for oracle like dbms_crypto, would this be vulnerable to any attacks? I know that it uses algorithms like 3DES, AES, etc. These are all thigns that you can use ...
0
votes
2answers
49 views

Can GET Requests with Spring Rest controllers be intercepted by attackers?

I'm building a Spring app and a React app which also contains Chat functionality. I use WebSocket with RabbitMQ as message broker. I store the chat history as encrypted messages with AES, and before ...
2
votes
1answer
69 views

Is AES the recommended symmetric cipher for production level software?

I was considering developing an application level software for file encryption after stress testing many of my implementations of popular symmetric ciphers. I would love to support multiple ...
1
vote
3answers
67 views

Does WPA2 use TKIP or not?

I am writing my master's thesis about WLANs, and there is something what I don't really understand. This may be a dumb question but I didn't find a clear explanation. WPA uses encryption TKIP. WPA2 ...
0
votes
1answer
77 views

CTR: Why not XOR before AES

I just learned AES-CTR. I am wondering about the security of the CTR mode. It is basically an AES of the nonce with an XOR-Encryption at the end. Are this 2 assumptions correct? The nonce doesn't ...
1
vote
1answer
80 views

Integrity attacks and encryption at rest

The AES-GCM algorithm provides not only confidentiality but also integrity. I understand that integrity is an important part of security in overall, but whenever I think in terms of possible attacks, ...
1
vote
2answers
130 views

AES-256-GCM using GnuPG

Is there a way to encrypt files with AES 256 in the authenticated GCM mode using GPG? I don't see GCM in supported cipher modes. It seems that the GPG uses only one mode (its own modification of CFB)...
0
votes
0answers
53 views

Best approach to encrypt files on servers with AES-128

If you have the follows requirements: a list of files on the server file system to be encrypted / decrypted a database table named T_FILE_REPO in which the files are registered (id, name, ...) a ...
-1
votes
1answer
107 views

Recover AES256 zip password by known result

I have a zip file containing unencrypted folder with encrypted files inside. Given that for some files I have their originals, is it possible to restore password used for encryption?
0
votes
0answers
83 views

Securely encrypt and decrypt files via PBE in Java (Jasypt seems insecure)

This post has been MOVED to StackOverflow due to lack of answers on Info Security: https://stackoverflow.com/questions/60960802/securely-encrypt-and-decrypt-files-via-pbe-in-java-jasypt-seems-...
1
vote
1answer
76 views

PDF User Password always give access to the Owner Password, even when encrypted with AES-128

I've been messing around with qpdf, and noticed something that seems huge: that a document's Owner Password is essentially useless, as it can be easily unset, and therefore that only the User Password ...
0
votes
0answers
47 views

How to decrypt XML encrypted as per FATCA IDES standard?

My former colleagues have encrypted an XML file as per FATCA-IDES standard: Digitally signed the XML payload (using "enveloping" signature and create SHA2-256 hash) RSA digital signature using the ...
0
votes
0answers
63 views

Are Mac OSX encrypted volumes to be trusted(from Disc utility)

I am currently using mac os disc utility on mac and normally create a 10GB encrypted image to store my random private files in... What really makes me paranoid is how fast or shall we say that it ...
-3
votes
1answer
350 views

Write a Python or C program to guess the key [closed]

Key generation program in C: #include <stdio.h> #include <stdlib.h> #include <time.h> #define KEYSIZE 16 void main() { int i; char key[KEYSIZE]; printf("%lld\n", (long long) ...
1
vote
1answer
86 views

Recover password of ZIP archive, having its decrypted and extracted content

Can I recover a password of an AES-encrypted ZIP if I know its extracted & decrypted content? The archive contains two files protected with two different passwords.
0
votes
0answers
76 views

How to crack rar file with protected pass with only the AES-256 key?

I have rar with protected pass.But I have the AES-256 key can I crack it and if I can. how?
0
votes
2answers
147 views

PBKDF2 hash over PBKDF2 key derivation

Imagine an app where any user provides a username and a password. This password is used to generate a 'strong' encryption key (for AES encryption) with the PBDKF2 key derivation algorithm. This ...
8
votes
3answers
747 views

How does Widevine, FairPlay, and other DRM's work under the hood?

I am trying to understand how DRM works under the hood. There doesn't seem to be much information about it on the web so I figured I would ask here. After some attempted research, I found it ...
3
votes
2answers
307 views

Are ECB and CBC modes of operation generally insecure?

In some Java code that I'm reading, I stumbled over the following encryption algorithms passed to the Cipher.getInstance(...) method: AES/CBC/PKCS5Padding DESede/ECB/PKCS5Padding RSA/ECB/PKCS1Padding ...
10
votes
1answer
366 views

What gpg defaults can be improved, when performance is not an issue?

gpg has some preset default settings, which I assume were selected as a compromise between speed and security. I understand that these are good enough for most people. But, in a situation where speed ...
1
vote
2answers
63 views

AES Traffic Security Assesment

Assume we have only access to the traffic between two module (Hardware, Software, ...) and These modules communicate with SSL (PSK). Is it possible to assess AES encryption of this traffic? some ...
0
votes
0answers
59 views

Is this symmetric key system secure?

I am creating a secure network data transfer system, and would like to know if there are any obvious flaws in this scheme. Secrets The secret is a password that is known to both clients. This ...
1
vote
2answers
182 views

Required a simple guide for secure messaging application

For my personal research, I have to create a messaging app, but security is only important part of application, security from MITM (man in the middle attack), at device end, and at server level. (note:...
2
votes
1answer
195 views

Why does the NodeJS Crypto docs use CBC instead of GCM for RSA key-pair?

I have read that GCM is almost always more secure than CBC when implemented correctly. However, in the documentation of NodeJS, CBC is being used as an example instead. The key-pair will be stored ...
2
votes
1answer
367 views

OpenSSL 1.1.1b warning “deprecated key derivation used”

We have a homework assignment to encrypt the famous Tux.ppm using AES with ECB and CBC mode. We have to show and outline how insecure the ECB mode is... So is there any way to ignore this warning? **...
0
votes
1answer
96 views

Can killerbee bypass AES-128 security?

I found information about KillerBee which sniffs Zigbee networks. Here is the tutorial: https://www.willhackforsushi.com/presentations/toorcon11-wright.pdf My question, is since Zigbee Xbee can use ...
2
votes
3answers
189 views

Should I chunk or not for AES-GCM file encryption

New to file encryption. Need to use AES-GCM for file encryption, can't change the alg. Heard about the max plain text size should be 64GB with same key and IV pair. Environment is python 3 with ...
2
votes
2answers
441 views

Does knowledge of data structure compromise AES encryption?

I'm considering encrypting a series of TAR archives using AES. Something I'm concerned about is the TAR format being quite predictable regarding field content and block sizes: Each file object ...
1
vote
1answer
60 views

First setup security protocols (key transfer) in not-secure environment

This question might very well be more a confirmation than anything else, but I'm breaking my head over a problem I try to solve. I hope someone can either confirm my thoughts or tell me something I'm ...
1
vote
1answer
101 views

Will using CTR mode with unique IVs, but only one password for encrypting multiple files, leak data or keys?

I'm working on a project to encrypt many files with a single password. The steps I will employ to encrypt the files are: user will execute a command similar to tool --encrypt --recurse directories/...
1
vote
4answers
2k views

Data too large for key size while trying to sign then encrypt

I'm not very experienced in the security field, but I'm trying to sign then encrypt a large folder in order to deal with software updates in some machines that will be offline. I've thought about ...
0
votes
1answer
197 views

Why rijndael.key value is different with rijndael.iv?

someone can tell me how rijndael works? for now i need to handle key and iv generated from C# (using rijndael + rfc2898derivebytes) to match with CryptoJS code snippet of C#: byte[] saltArray = ...
1
vote
2answers
99 views

Why are cryptographically secure random number generators required for shared keys?

As I understand, key exchange for secure communications like TLS has a client take a server's public key, generate a random AES key and send that as a shared key for further communication. The key is ...
3
votes
1answer
195 views

An alternative for /dev/urandom

I like to overwrite my harddisk with random data. Since /dev/urandom as source is too slow to overwrite a large amount of data in a reasonable time, I'm looking for a good alternative. These two ...
0
votes
0answers
52 views

does BouncyCastle implementation of AES-256-CBC meet requirements: “128-bit IV”, “PKCS7 padding” and “HMAC verification”

I'm writing an app for a client and part of the client's encryption requirements for use of AES-256-CBC are: "128-bit cryptographically random initialization vector" "PKCS7 padding" "HMAC of encrypted ...
0
votes
1answer
98 views

What if the attacker tamper the IV used in the block cipher CBC mode?

I am a newbie to block cipher and when learning the CBC mode, I start to understand that an IV is being used in this mode and also will be transferred to the message receiver. So here is my question,...
3
votes
3answers
240 views

Is safe to use AES-256 to encrypt data with small variations?

I have two nodes that need to communicate, A is sending data to B. We just assume that AES-256 key is already shared across the nodes. The only data being sent from A to B are a few bytes commanding ...
0
votes
0answers
89 views

How is a cryptographic key used as a password when using WiFi? [duplicate]

I have recently come from a post and the accepted answer described the password as a cryptographic key. I have an understanding of RSA, AES and uses of it such as digital signatures however I fail to ...
2
votes
0answers
147 views

Is using AES secure for password managers?

I'm developing an application that automates processes. The user connects to many accounts that the application uses then passwords are encrypted using AES. An example algorithm looks like this: ...
1
vote
1answer
1k views

Decrypt file using Key and Initialization Vector in Linux

I am Salesforce developer but new to the Security World as well as Linux. We encrypted a file with Key and initialization Vector in Salesforce(only symmetric encryption is possible in Salesforce). No ...
2
votes
1answer
123 views

is it safe to AES encrypt the RSA private key and storing it in the database

i'm building an app that really needs encryption of this type , my question is it safe to store the aes encrypted RSA key in the database ? here is how i encrypt the key : i generate a random 256 ...
0
votes
0answers
20 views

60 character hex encrypted value with 32 character hex seed [duplicate]

Attempting to recover lost admin passwords from an old industrial control system database. We believe these have been encrypted rather than hashed (at least we know password version 0 for this system ...

1
2 3 4 5
15