Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
44 views

Encryption database on app that runs on client side

I'm having a discussion at work and I want to know the opinion of the community and know if I'm wrong or not. We have a product that runs on client computers (on-premises) and it uses a local database ...
user avatar
  • 1
0 votes
0 answers
6 views

AES CBC: When to use new IV [migrated]

I am trying to figure out when to use a new IV for an AES-CBC communication and whether my approach is safe. Here is a quote from Thomas Pornin from a similar question: So, to sum up: you must choose ...
user avatar
  • 151
1 vote
1 answer
85 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
user avatar
-1 votes
2 answers
87 views

Is possible to reverse engineer a AES encryption of a known file format?

If the encrypted file is from one of the known formats, such as doc, jpg, mp3, etc., is it possible to reverse engineer it and decrypt it? I "roughly" know the mechanic behind the AES ...
user avatar
2 votes
0 answers
30 views

Kaspersky Total Security Data Vault encryption AES256 BUT with "effective key-length 56bit"

While comparing Kaspersky Total Security (KST) with Kaspersky Internet Security (KIS). One of the "extras" of KTS is the added "feature" of "Data Vaults", which "...
user avatar
  • 111
-2 votes
1 answer
109 views

AES - Is it sensitive to let anyone encrypt a message only you can decrypt?

I have an application in which some data can be encrypted through AES. Such data can emanate from multiple sources I may not know. For practical reasons I want those sources to be able to encrypt ...
user avatar
1 vote
1 answer
64 views

Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?

In Tor, when a client communicates with an entry node, they exchange the parameters such as the prime number and the generator with each other through DH. What about when an entry node communicating ...
user avatar
1 vote
3 answers
100 views

AES Encryption vs hash function with the strong assumption of input size and secure key?

There are plenty of questions about the difference between AES encryption and hash functions. I read some of them and the general answer is that AES is reversible as long as the key is exposed. AES ...
user avatar
  • 11
0 votes
1 answer
43 views

Soundex and encryption : good friend?

We are considering using the Soundex algorithm to improve our search capabilities in our app. Our app data are encrypted in the DB. (EAS256) The Soundex result will be stored in clear next to our ...
user avatar
0 votes
0 answers
21 views

Can a AES 256 key be recovered with the encrypted and decrypted message? [duplicate]

I have no advanced knowledge in cryptography. Is it possible to recover the AES-256 key with the decrypted and encrypted message?
user avatar
  • 101
1 vote
0 answers
28 views

Why is it not a good idea to simply encrypt the plaintext with the receiver’s public key? [duplicate]

What are some of the risks when encrypting "plaintext" with a receiver's public key? I have been Googling for hours, and been reading in the Computer Security Principles and Practice 3rd ...
user avatar
13 votes
5 answers
3k views

Pseudorandom vs. True Random

Proper security algorithms demand true random numbers. For instance, secret keys & initialization vectors should never not be true random. However, generating numbers using Java's Random library ...
user avatar
1 vote
1 answer
111 views

How does a Cipher Suite Work without an Asymmetric Algorithm? [closed]

Using the cipher suite “TLS_AES_128_CCM_SHA256” This example is referring to a self signed certificate If a server uses TLS and uses the cipher suite above? How does the certificate get signed if ...
user avatar
  • 11
0 votes
2 answers
77 views

Is it possible to eavesdrop HTTPS encryptions by file size?

I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when ...
user avatar
  • 101
0 votes
1 answer
74 views

Ownership proof scheme

I'm developing a device that will require ownership proof to activate HOTP authorizations. The HOTP codes will be used in the BLE bonding between the device and the owner's phone. I came up with the ...
user avatar
  • 3
0 votes
0 answers
159 views

File encryption with Python and AES

I need to write a Python script to occasionally encrypt some small text files (~10 Kb) in order to store them in an insecure environment. Each file will be encrypted via unique symmetric key and AES ...
user avatar
  • 1
5 votes
1 answer
196 views

Design of a web based password vault

I'm designing a password vault that's accessible to clients through an existing web application. The clients are small, (and mostly non-technical) businesses that aren't using password managers, but ...
user avatar
4 votes
2 answers
228 views

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

I would like to know what encryption 1Password uses. On the About the 1Password security model page, it says: Your 1Password data is kept safe by AES-GCM-256 authenticated encryption. The data you ...
user avatar
  • 143
0 votes
2 answers
104 views

How to be sure there are only encrypted data on my backend

I am coding an online password manager as part of my apprenticeship. I have already coded the full backend to synchronize the encrypted data and a frontend that encrypts and decrypts data with AES. So ...
user avatar
12 votes
2 answers
4k views

Do I need to use TLS if data is already encrypted and gets decrypted client-side?

We are serving static content over the internet, and have a business requirement that the data must be encrypted at rest. Currently it is stored in AWS S3, where it can be accessed by authorized ...
user avatar
  • 131
0 votes
0 answers
71 views

Step-by-step file encryption/decryption using user-supplied password

Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
user avatar
  • 101
0 votes
1 answer
101 views

How to encrypt/store private key, if login is with biometrics/OTP/Sign in with Google

I am creating a cross-platform application, in which I am encrypting all data using AES-GSM. So my problem is that I want to store private keys locally on the user's device (either Android, IOS, Web, ...
user avatar
  • 103
0 votes
1 answer
240 views

Intercepting responses using mitmproxy in Python. Problem in decryption

I have set up MitmProxy with a Python script to intercept network responses from one domain, used by a Desktop App. However, when I start up the App, I get the following series of transactions { &...
user avatar
0 votes
1 answer
255 views

Can aes256 be cracked with math.random

I read this https://medium.com/@betable/tifu-by-using-math-random-f1c308c4fd9d and if the key is generated with an old browser using math.random via chrome v8, could the AES encrypted message be ...
user avatar
  • 1
0 votes
1 answer
101 views

Is there any benefit to encrypting a derived key?

I'm working on updating the encryption method of a class at work. The encrypt and decrypt methods take the text to encrypt/decrypt and a string which used to be used as a salt (this string is ...
user avatar
  • 1
0 votes
1 answer
207 views

What is the best way to encrypt extremely sensitive and important data

I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines. I understand ...
user avatar
  • 781
0 votes
0 answers
120 views

What is more secure: encrypting individual files in archive or encrypting the archive itself?

Let's assume we have symmetric crypto with the same IV for each operation. From my perspective, encrypting the whole archive is better, as similar strings are compacted and the CBC will work for us ...
user avatar
  • 101
0 votes
0 answers
84 views

Why does KMIP require to request two keys for AES-XTS?

According to KMIP user’s guide, when a client application desires to retrieve a 512 bits AES-XTS key, it should request 2 separate KMIP keys of 256 bits each. This is to support the structure of an ...
user avatar
  • 21
0 votes
0 answers
128 views

Specification of AES-based PKCS#5 Password-Based Encryption (PBE)

recently I had a look at the capabilities of the Java keytool to create PKCS#12 containers with a protected private key. According to the standard a private key is protected using a PKCS#8 shrouded ...
user avatar
2 votes
1 answer
488 views

AES256 - 7zip Vs GPG

I noticed that 7zip provides an option to encrypt the contents of a folder using AES256 (Screenshot Below) and so does GPG using this command: gpgtar --output <Name_Of_The_Output_File> -v --...
user avatar
  • 606
2 votes
1 answer
172 views

Use pre-computed PBKDF2 key with high iteration count as password

We provide web redirection based integration with our partners' web apps. The flow is something like the following, and the password is generated randomly and shared with them during the onboarding ...
user avatar
0 votes
1 answer
203 views

How are AES-256 keys generated using hardware random number generator?

I know about key derivation functions such as PBKDF2 which derive keys from passwords. That said, I am having hard time wrapping my mind around how AES-256 keys are generated using hardware random ...
user avatar
0 votes
1 answer
129 views

Are AES-256 keys essentially unsigned integers between 0 and 2^256-1 padded with zeros?

I know about key derivation functions such as PBKDF2 which derive keys from passwords. Am I wrong in assuming AES-256 keys are essentially unsigned integers between 0 and 2^256-1 padded with zeros?
user avatar
2 votes
1 answer
151 views

How to convert passphrase to AES256 key?

My plan is to convert a passphrase in UTF-8 ASCII-US to Unit8Array(32) then use it in: 256bitsKey = Unit8Array(32) from passphase iv = window.crypto.getRandomValues(new Uint8Array(32)); CryptoJS.enc....
user avatar
0 votes
1 answer
139 views

AES-256 without key stretching

It is not so difficult to create a password which is exactly 32 characters long. In this question - AES-256 Key Length Importance @Marc writes: you absolutely should not be using a password as the ...
user avatar
  • 357
1 vote
1 answer
446 views

AES-256-GCM transfer IV and AuthTag

Question is for transfer encrypted data between two services (Like HTTP, GRPC or etc...) Can I transfer IV and AuthTag in plain, Is this approach secure? I have sample code in Node.js and I'm not ...
user avatar
  • 113
1 vote
1 answer
295 views

How safe is AES 256bitkey encoded in HEX, Base64?

I am using CryptoJS AES 256 encryption: CryptoJS.AES.encrypt(realData, generateKey(passphrase), {iv: iv}); The secret is generated through: function generateKey(passphrase) { const salt = CryptoJS....
user avatar
0 votes
1 answer
99 views

If I use multiple different RSA public keys to encrypt a single AES key for distribution, how much does that degrade the encryption?

I would like to store encrypted AES-256 keys in a public location and give 100 different people access to the AES key by using each of those 100 people's public RSA encryption key to encrypt the AES ...
user avatar
1 vote
1 answer
581 views

Can I get AES CBC key from known plaintext, ciphertext, iv? [duplicate]

Long story short: I was using AES CBC PKCS5 on my image server, but I lost my keys (one key per image). I know the first 61 bytes (the original and the encrypted) of each image plus I know the IV, and ...
user avatar
0 votes
1 answer
298 views

How to correctly convert a bit key to string for aes 256 encrytion?

I am using CryptoJS AES 256 encryption: CryptoJS.AES.encrypt(string, secret); The secret is generated through: function generateKey(str) { const salt = CryptoJS.lib.WordArray.random(128 / 8); ...
user avatar
1 vote
1 answer
109 views

IV generation with RNGCryptoServiceProvider

I'm using RNGCryptoServiceProvider.GetBytes(new byte[16]) to generate IV's to use in AES (256 bits) encryption. For every record I encrypt, I generate a new IV. I'm also prepending each of these IV's ...
user avatar
2 votes
2 answers
346 views

Nonce in Aes-gcm AAD

I have some data which I'm encrypting using Aes-Gcm. Every time I have to encrypt the data, I generate a random nonce of the appropriate size, as well as an empty array for the tag data. In Aes-Gcm, ...
user avatar
0 votes
2 answers
113 views

Does using subkeys provide better protection in this instance?

I was thinking of implementing the following scheme for encryption of many independent files: From the password, which is given by the user, generate a master key using for example HMAC-SHA. From ...
user avatar
0 votes
1 answer
410 views

Reusing the IV, but not the key

There are a few questions on this site asking about reusing the same initialization vector for example for AES encryption under the same key, see for example this question. Now, let's not respect that ...
user avatar
3 votes
2 answers
805 views

Why encrypting with ECB block cipher mode provides different result?

I'm playing around with openssl command line to verify my understanding on block cipher mode. I read that ECB block cipher mode always encrypt the same text to the same output. AES operates on 16 ...
user avatar
  • 133
0 votes
1 answer
1k views

7z "Copy 7zAES" algo brute force with 32 char password for when original file is available (QNAP QLocker ransomware) [duplicate]

As some in here might know, there is/was a ransomware attack going on worldwide that used 7z to encrypt all files <20MB for a ton of users world wide. Each user has a unique 32 char password (Upper ...
user avatar
1 vote
3 answers
114 views

In Algorithm: dh-ietf1024-sha256-aes128-cbc-pkcs7 where to get the IV?

I'm implementing dh-ietf1024-sha256-aes128-cbc-pkcs7 in golang and according to documentation I've managed to create the 128-bit key appropriate for AES (from my 1024-bit shared-key computed from my ...
user avatar
  • 296
0 votes
0 answers
576 views

How to save AES Key in PEM file

I'd like to store a private symmetric key, aes-256, in a PEM file. My understanding is that usually these types of keys are derived using RSA/EC DH and there's no need to save them, but in my ...
user avatar
3 votes
1 answer
243 views

GoCryptfs on cloud

I read the audit docs on GoCryptFS website (https://nuetzlich.net/gocryptfs/threat_model/). There dragon has full information about the read write done in the gcfs partition, what does this mean and ...
user avatar
1 vote
1 answer
147 views

Hybrid Encryption: What is the format for storing the encrypted key and the cipher text together?

In the scenario of a hybrid encryption for which I use RSA (asymmetric) to encrypt the encryption key used with AES (symmetric) to encrypt my message, I need to store the encrypted key with (together) ...
user avatar

1
2 3 4 5
17