Questions tagged [aes]
The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.
858
questions
0
votes
0
answers
51
views
How can I understand the zip2john hash format?
I had a .zip file that was apparently encrypted with AES-256 deflate.
7z l -slt archive.zip | grep Method
Method = AES-256 Deflate
Then I used zip2john to get a "hash" out of it:
archive....
1
vote
0
answers
37
views
Does a signature service provider level digital certificate for electronic signature comply with eIDAS requirement for Advanced Electronic Signatures?
I have some basic questions regarding eIDAS and 'Advanced Electronic Signatures'.
Say, if I create a product under my company Acme Inc that offers a simple electronic signature where I sign every ...
- 31
0
votes
0
answers
42
views
What is the best way to encrypt asymmetric metadata?
As a hobby project I'm thinking about how to write a secure chat where even all metadata are encrypted so that it is impossible to leak any (meta) information by design.
My basic idea is right now:
...
- 133
0
votes
0
answers
75
views
Bypassing AES encryption if the keys are not in local,but in server
When I conduct a mobile pentest, I have run into payload encryption in HTTP traffic. In general, the AES key and IV ( initialization vector) are located in APK, and can be used to encrypt the payload ...
0
votes
0
answers
37
views
Backup to a remote Encrypted APFS drive mounted through Samba. Is this a sound plan?
Say I have a remote machine (something like a VPS) that I have no physical access or physical authority over other than a user on it (with root access). However, I'd like to do Time Machine backups on ...
- 1,039
0
votes
3
answers
130
views
AES mode for reusing same keyset
I'm building a sharing protocol where users share data. To make it so only those authorised to read the data can do it, I'm using AES256 encryption. Every authorized person has a keyset (IV & key) ...
- 123
1
vote
4
answers
230
views
Is there any benefit of encryption if the password is known?
Is there a benefit of encryption of a file (for example with AES-GCM), if the password is included alongside the encrypted data?
I know it sounds like a useless question, but I am curious about its ...
- 17
1
vote
2
answers
123
views
Recommended temporary key size for communication
What I'm going to do is use AES-256 encrypted network communication to agree upon a pseudo-random key for further communications between two peers, so that every "session" utilizes a ...
- 209
0
votes
1
answer
81
views
Is rsyncrypto secure?
My information security model right now is "if you want the data that I am storing on the cloud, you can have it" and I would like to change that to "if you want the data and have a $5 ...
- 251
3
votes
1
answer
107
views
How to form the IV and Additional Data for TLS when encrypting the plaintext
When using AES GCM for encryption within TLS and referring to the below diagram:
Is iv[0:3] the fixed IV established from the handshake and iv[4:11] are the current (write) sequence number + 1?
For ...
- 145
1
vote
1
answer
229
views
AES ECB cookie bypass
I am currently participating in a CTF Challenge and have reached a stage where I discovered a "log_admin" page. This page generates a cookie that is encrypted using AES 128 ECB. I obtained ...
- 11
0
votes
2
answers
166
views
Why AES256 with SHA384 in TLS [closed]
Is there any concrete/solid rationale for this choice of cipher? Seems to be the default when I connect via TLS1.2 to an Apache2 server (whatever latest version on Debian 11) with configuration lines ...
- 123
4
votes
4
answers
752
views
Using hashed trigrams to search over encrypted data
For practice, I write let's call it a notebook app that stores users' notes in AES-encrypted form. For encryption, I use a password-based intermediate key technique as described here. Actually, the ...
- 63
0
votes
1
answer
342
views
Mifare Desfire authentication process / cloning protection
I am trying to write a small explanation for a customer, who wants to understand why his Mifare Desfire transponders are safe from being cloned.
I was trying to search for an easy scheme or text that ...
- 1
1
vote
0
answers
125
views
How to decrypt SSHv2 using AES-256 session keys from memory dump?
How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump.
I have the full PCAP for the SSH sessions, including the initial handshake and ...
- 51
0
votes
2
answers
158
views
Is using weak random numbers for the initialization vector of AES just a theoretical issue?
I'm the maintainer of pypdf, a Python library for reading/manipulating PDF documents. I recently discovered that pypdf used random instead of secrets for ...
Generating the initialization vector (IV) ...
- 3,916
1
vote
3
answers
131
views
Is it possible to generate a read-only key for a symmetrical encryption (AES)?
I am working with hardware that can only encrypt with AES. The problem with this is that the message must be publicly verifiable on the blockchain, without the encoding key being exposed. This is the ...
- 11
1
vote
0
answers
89
views
Where is the 8 byte explicit nonce for decrypting AES GCM within TLS?
I'm confused how to retrieve the remaining 8 bytes of the nonce (to combine with the 4 bytes established during the handshake) to generate the 12 byte IV to decrypt AES 128 GCM.
RFC 5288 "AES ...
- 111
0
votes
0
answers
156
views
disk or file encryption using the TPM2_EncryptDecrypt2 command of the TPM
Are there any disk/file encryption methods that utilize the TPM2_EncryptDecrypt2 command? All TPM disk encryption tutorials I can find use the TPM to secure the disk encryption key, and not use the ...
- 133
0
votes
1
answer
333
views
Generating AES 256 key from ECDH P-384
Is there anything wrong with hashing(with SHA256) the shared secret generated by ECDH that is 384 bits long and using that as the AES key? Is there a difference between that and, say, truncating the ...
1
vote
1
answer
62
views
javascript: how to apply block cipher to byte stream
I am writing browser javascript that has a pre-shared key with nonce, and creates a binary websocket connection. How can I apply block encryption-authentication such as AES-GCM to the messages?
Is it ...
- 379
0
votes
0
answers
76
views
Recovering the key of a lost BitLocker volume
I have a 1TB HDD encrypted with BitLocker. It was set up in a way that when I'd boot Windows it would automatically mount it using the key. (I believe it is stored in some kind of .BEK file) I no ...
- 11
1
vote
0
answers
73
views
Symmetric key importance During encrypt and decrypt [closed]
I am performing a small command line operation the goal is to generate a symmetric key using openssl and store the key in TPM FAPI keystore.
After modifying the symmetric key, the decryption should ...
- 161
3
votes
0
answers
1k
views
Strongest symmetric algorithm in 2022 [duplicate]
I'm curious about the best encryption algorithm for encrypting my files in 2022? I thought it was a good solution to encrypt my private key with AES-256 but I decided to ask here and choose better ...
- 169
0
votes
2
answers
184
views
AES Encryption as XSS protection for url parameters?
So, I found a website that uses AES encryption to prevent XSS and I'm wondering if this approach is inherently flawed.
It has an endpoint like execute.php?code=encryptedPayload which de-crypts the ...
- 158
1
vote
2
answers
10k
views
Generate AES-256-GCM key
I'm using aes-256-gcm encryption. I used a sample key provided in the docs and it works fine.
I also tried a key generated from here and it works fine. There's no option to specify gcm here yet the ...
- 149
1
vote
1
answer
60
views
How to encrypt peer data exchange?
The situation currently is as follows:
All our devices in the same network broadcast their state (alongside with unique IDs) over the network. They also listen in for broadcasts of others. Everything ...
- 223
1
vote
0
answers
31
views
Can parts of WebCrypto AES-GCM be reused between encryptions
I am trying to better understand the processes involved in e2ee using WebCrypto on the browser.
I understand that the only real method to use a passphrase to generate a symmetric key on the browser is ...
- 111
1
vote
1
answer
165
views
Where is the AES key of ransomware stored (in the file header/trailer)?
Advanced types of Ransomware generate, usually, an AES 128 bit key (used to encrypt files, some types of ransomware use a unique AES key for each file). This key is generated on the fly. In addition, ...
- 35
0
votes
0
answers
35
views
Is it possible to hack encrypted external HDD,if you have access to it? [duplicate]
If I lose my external HDD and somebody finds it and tries to hack, will he succeed?Is it possible to get data from encrypted disk by disassembling it and working with platters?
HDD is APFS AES 256 ...
0
votes
1
answer
602
views
Is it safe to store data on APFS 256 AES encrypted external HDD disk?
I'm using a MacBook and want to store confidential data (financial documents, passwords, private photos, etc.) on an external HDD disk.
How safe is setting up APFS AES 256 encryption with disk ...
0
votes
1
answer
71
views
Probability of getting different plaintext with different key
What is the probability that an AES encrypted file, using a wrong password, gets decrypted to something different than the plaintext, but which could still be likely to be interpreted an the true ...
- 15.7k
2
votes
1
answer
2k
views
CryptoJS AES encryption/decryption problem
A simple encryption/decryption using CryptoJS gives me a weird output. Can anyone point me to where the code is wrong? (I'm looking for the output in the console)
var code = "Testcode";
var ...
- 23
0
votes
1
answer
79
views
Is having a seperate server to handle encryption operations a secure way to protect a private key for a web application?
Assume I have two servers which are part of a production environment for a web application which handles sensitive user data. The first server is a ruby on rails application, and the second is a ...
- 256
2
votes
1
answer
358
views
Military-grade encryption on Blu-ray discs?
Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
- 123
-1
votes
2
answers
665
views
Is possible to reverse engineer a AES encryption of a known file format?
If the encrypted file is from one of the known formats, such as doc, jpg, mp3, etc., is it possible to reverse engineer it and decrypt it?
I "roughly" know the mechanic behind the AES ...
- 3
2
votes
0
answers
143
views
Kaspersky Total Security Data Vault encryption AES256 BUT with "effective key-length 56bit"
While comparing Kaspersky Total Security (KST) with Kaspersky Internet Security (KIS). One of the "extras" of KTS is the added "feature" of "Data Vaults", which "...
- 465
-2
votes
1
answer
124
views
AES - Is it sensitive to let anyone encrypt a message only you can decrypt?
I have an application in which some data can be encrypted through AES.
Such data can emanate from multiple sources I may not know.
For practical reasons I want those sources to be able to encrypt ...
- 97
1
vote
1
answer
255
views
Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?
In Tor, when a client communicates with an entry node, they exchange the parameters such as the prime number and the generator with each other through DH.
What about when an entry node communicating ...
- 71
1
vote
4
answers
1k
views
AES Encryption vs hash function with the strong assumption of input size and secure key?
There are plenty of questions about the difference between AES encryption and hash functions.
I read some of them and the general answer is that
AES is reversible as long as the key is exposed.
AES ...
- 11
0
votes
1
answer
81
views
Soundex and encryption : good friend?
We are considering using the Soundex algorithm to improve our search capabilities in our app.
Our app data are encrypted in the DB. (EAS256)
The Soundex result will be stored in clear next to our ...
- 59
0
votes
0
answers
28
views
Can a AES 256 key be recovered with the encrypted and decrypted message? [duplicate]
I have no advanced knowledge in cryptography.
Is it possible to recover the AES-256 key with the decrypted and encrypted message?
- 101
1
vote
0
answers
28
views
Why is it not a good idea to simply encrypt the plaintext with the receiver’s public key? [duplicate]
What are some of the risks when encrypting "plaintext" with a receiver's public key?
I have been Googling for hours, and been reading in the Computer Security Principles and Practice 3rd ...
- 93
15
votes
5
answers
5k
views
Pseudorandom vs. True Random
Proper security algorithms demand true random numbers. For instance, secret keys & initialization vectors should never not be true random.
However, generating numbers using Java's Random library ...
- 277
0
votes
1
answer
137
views
How does a Cipher Suite Work without an Asymmetric Algorithm? [closed]
Using the cipher suite “TLS_AES_128_CCM_SHA256”
This example is referring to a self signed certificate
If a server uses TLS and uses the cipher suite above? How does the certificate get signed if ...
- 1
0
votes
2
answers
129
views
Is it possible to eavesdrop HTTPS encryptions by file size?
I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when ...
- 101
0
votes
1
answer
88
views
Ownership proof scheme
I'm developing a device that will require ownership proof to activate HOTP authorizations.
The HOTP codes will be used in the BLE bonding between the device and the owner's phone.
I came up with the ...
- 3
1
vote
0
answers
324
views
File encryption with Python and AES
I need to write a Python script to occasionally encrypt some small text files (~10 Kb)
in order to store them in an insecure environment.
Each file will be encrypted via unique symmetric key and AES ...
- 11
5
votes
1
answer
486
views
Design of a web based password vault
I'm designing a password vault that's accessible to clients through an existing web application. The clients are small, (and mostly non-technical) businesses that aren't using password managers, but ...
- 163
4
votes
2
answers
644
views
What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?
I would like to know what encryption 1Password uses.
On the About the 1Password security model page, it says:
Your 1Password data is kept safe by AES-GCM-256 authenticated encryption. The data you ...
- 143