Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

Filter by
Sorted by
Tagged with
0
votes
0answers
58 views

Decrypt AES 128 encrypted file with a key file

I have a file which is encrypted using AES 128 and I have a key file whose size is 48 bytes. How can I decrypt the file using the key file? The key file has no extension, I opened it in notepad and it ...
2
votes
1answer
83 views

Why AES output has more size than my plaintext?

I have enciphered a vector of bytes that has 17 bytes in itself. However, When I try to enciphered with AES, AES output has a 32-byte size? What is happening here?
0
votes
0answers
36 views

Curve25519 vs. Curve25519 and AES Key vs. Curve25519 AES Ciphertext (Instagram) [closed]

I am trying to send a password from a client to the server. I just don't know how to encrypt it. method: I used a website (Instagram) as a guide here. Here the password is encrypted with AES and the ...
-1
votes
0answers
55 views

gpg stopped decrypting a symmetrically encrypted file

Just yesterday I decrypted this same file using a key that I have written down, but today every time I try the same key gpg returns: gpg: decryption failed: Bad session key I suspect that either I ...
1
vote
0answers
66 views

Why is a password encrypted with AES and then sent back to the server together with the key with RSA (Instagram)?

I am trying to understand an encryption process on a website (Instagram). As far as I know, a public key is sent from the server to the client. Then the password is encrypted with AES_GCM_256 and ...
0
votes
1answer
64 views

Calculate AES-GMAC

I have a symmetric key and I have the data that needs to be authenticated. So one of the solution that I have in mind is to use the AES GMAC. I know there are other MAC's such as HMAC or hash ...
0
votes
0answers
18 views

Does it increase security if the CBC chunks of a AES-256 encrypted bytestream are uploaded to different clouds? [migrated]

I want to backup my data according to the 3-2-1 rule. I already backup to 2 different drives (2 different systems) at home. In addition i would like to use cloud storage (Google, Amazon etc.). ...
1
vote
2answers
137 views

Is the following a secure method for file encryption?

So the goal is to use AES-CBC-256 to encrypt the data in a file. To derive the AES key and IV pbkdf2 will be used to generate a 384 bit output using a given password and salt, where the first 256 bits ...
5
votes
2answers
202 views

Can password managers read my secure data? If no, how does sharing work under the hood?

All the popular password managers on the market advertise that they have AES-256 grade security. In a nutshell, the user has the master key and the password manager has the cipher-text. So the ...
2
votes
1answer
211 views

Which one to use AES : GCM vs CBC

I am planning to encrypt database fields using AES encryption. Now, this encrypted data will not transfer over the internet and will reside in our own datacenter only. From what I read, GCM mode ...
1
vote
1answer
74 views

Question regarding data encryption/decryption and sharing said keys with third party's

At work we have a pretty complex problem(for me at least) and I have no idea what a fitting solution would be. To give a bit of context, the company I work for is a data processor/provider for big ...
0
votes
0answers
32 views

Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?

Assume we use AES256 to encrypt the same payload 100 times, each with a different key. An attacker gains access to the 100 encrypted payloads, and nothing else. Is there some way the attacker can gain ...
1
vote
0answers
76 views

Wrapped Key Encryption - Hide AES secret key in Javascript & Java

I need to encrypt some sensitive fields back and forth in browser and server, same goes for decryption, for this I am planning to implement AES algorithm, but the problem here is with secret key which ...
2
votes
2answers
82 views

With AES, does key format make a difference to security?

For context, I'm assuming the attacker knows the format of the key. Do these two keys have the same strength, or by leaving the hyphens in the key am I reducing the security by a partly-known-key ...
0
votes
1answer
43 views

On what basis to create Data Keys

For PII, we have to encrypt some columns in our DB(All of our infra resides on our own DC, not using any cloud provider). Now roughly what we are doing is Created a CMK at AWS. Generate Data Key ...
0
votes
1answer
72 views

Symmetric encryption - given plain text, produce cipher text without key

Suppose Alice and Bob are communicating using a peer-reviewed symmetric encryption algorithm such as AES-256. Bob possesses a private encryption key to decode messages from Alice, but Alice does not ...
1
vote
1answer
92 views

How to perform encryption/decryption in a RESTful system?

I'm not a crypto/security expert and have designed an architecture for encryption/decryption. I'm not sure if its full proof and want to know what people use as industry standard? I'm trying to ...
0
votes
0answers
47 views

Review of the design of Credentials Manager app

I want to make a mobile app that will act as a Credentials Manager and store all my access information for websites, credit cards, secure notes, and so on on the server encrypted with REST API. The ...
0
votes
0answers
64 views

How to securely design REST API for Password Manager app?

I want to create Password Manager where users can create their accounts and store website passwords. For the frontend, it will be a mobile app, but I need REST API as the backend data where the data ...
0
votes
0answers
52 views

how to encrypt and decrypt messages with more than one sender and more than one receiver?

I am creating a chat app. This app contains private messages and channels. These channels include more than one user. I want to encrypt messages using AES and to transfer the AES key to users of this ...
0
votes
1answer
53 views

Establishing safe connection in Java

In my Java project I'm trying to create a 100% secure method of communication between the method and the client. I used to use this process: Client: generates 4096-bit RSA keypair Client: sends public ...
3
votes
2answers
1k views

RSA key exchange

I want to create a message exchange program. These messages are encrypted with the AES key, and this key is encrypted using the RSA algorithm. When I send a message from User 1 to User 2, I need to ...
0
votes
1answer
65 views

Where and how to store admin account credentials for enterprise systems?

To my understanding, password-protected spreadsheets are not best practice for storing admin creds, whether it's a company of 5 people or a company of 50,000 people. In such a case, what are some best ...
0
votes
0answers
64 views

Reused key issue in Asymmetric Encryption

We all hear often about the reused key issue in block cipher. For example, for a picture being encrypted by the electronic codebook mode, we will still see the shape of the picture. https://images.app....
0
votes
0answers
55 views

Is there a standard approach for serializing an RSA encrypted AES key alongside the AES payload itself?

Diffie-Hellman won't really work here, since only one side has a public key, one side has the private. It must be this way to prevent decryption when the data is at-rest on one of the sides before ...
0
votes
1answer
176 views

Performance comparison between ed25519 vs AES

I found that AES has dedicated hardware on most machines. The question is can we use ed25519 to replace AES? Instead of using RSA to encrypt the AES key and then encrypt the data with AES, can we just ...
2
votes
0answers
77 views

Is AES statistically noise? Reliably so?

Suppose we want to store files in a way that has plausible deniability. Ie. we can deny the existance of those files. The approach is this: We allocate (or just use) a chuck of disk an initialize it ...
2
votes
2answers
84 views

Password relevance in key derivation function

I'm questioning the password used in a key derivation function, whether It makes sense to make it unique for every generated symmetric key and why
0
votes
0answers
36 views

PyCrypto based encrypted Property class for Google App Engine standard - is this AES implementation secure

I have a need to encrypt OAuth access and refresh tokens stored in the Google Cloud Datastore. The goal here is to ensure that if the Datastore entities are accessed independently of the code, the ...
0
votes
0answers
38 views

Is there any point in using a non-null IV for AES-GCM if the key is only used once?

I understand that re-using a key without a unique IV is a deadly sin, but what if there‘s the guarantee that the key is only used for encrypting and decrypting one dataset? I was thinking about ...
1
vote
0answers
39 views

Format for data & key exchange/storage [duplicate]

Is there a standard format for storing/exchanging encrypted data along with the key needed to decrypt it (data is encrypted with a single use symmetric key and the symmetric key itself is encrypted ...
0
votes
1answer
124 views

AES-256 ESSIV in dm-crypt

I am playing around with disk encryption. https://gitlab.com/cryptsetup/cryptsetup/-/wikis/DMCrypt#iv-generators says: essiv: "encrypted sector|salt initial vector", the sector number is encrypted ...
0
votes
0answers
43 views

Data integrity when AES key can be modified

I found a client-server application where the server creates a random AES-256-CBC key, and gives this key to the client for use as an authentication token. The key is used on the server to encrypt a ...
0
votes
3answers
218 views

DTLS vs direct use of AES. What are the threats unique for direct use of AES instead of DTLS?

For regular traffic in mesh network (between Internet of Thing devices) customer decided to use one of two options: DTLS PSK ciphersuite - DTLS based on pre-shared symmetric key or direct use of AES -...
1
vote
1answer
401 views

Does MEGA store my password or decryption key? How do they check the login information I entered is correct or not?

Does MEGA store my password or decryption key? How do they check if the login information I enter is correct while only my email address is sent to the server? I read this article: How can mega store ...
0
votes
1answer
143 views

AES encryption (in Java) of different JSON strings always produce same encrypted string as result. Why? [closed]

I have a program written in Java which takes JSON string as argument, encrypts it using AES then encodes it using Base64. JSON string is like: {"a": "b"} or {"a": "n"} or {"a": "k"} I.e related ...
-1
votes
2answers
130 views

Encrypt files without leaving a hint of the encryption algorithm used [closed]

I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
0
votes
0answers
116 views

Is AES ECB mode safe for one block Encryption then MAC with same key?

I want to do something really basic but I need to be sure that the process is safe : Problem Alice and Bob have to agree on a secret 6 digits PIN. They each have a pre-shared aes symetric key k and ...
1
vote
1answer
99 views

Does knowing part of the key make encryption weaker?

I am asking specifically about AES CBC mode. Is it safe to assume that an encryption key of length X with N characters known by an attacker is just as secure as a key of length X − N? For example, ...
1
vote
1answer
82 views

security of AES where attacker can ask secure code to decrypt arbitrary cypher-text

A service or library provides a function decrypt( user_id, cypher_text) and gives back plain text. Internally to the function it loads an AES key from a secure vault, decrypts the cypher_text, and ...
0
votes
2answers
264 views

Save private key in a database to share between multiple accounts

I don't know if my concept would be secure so I ask here. The main purpose is to log in with password x and also use that password to encrypt an RSA private key with AES to store that in the main ...
0
votes
0answers
44 views

What is known about the strength or weakness of the PBEWITHSHA256AND128BITAES-CBC-BC algorithm?

Is PBEWITHSHA256AND128BITAES-CBC-BC known to be outdated or is it considered robust? Is it sufficient in applications that need to protect PII? Thanks.
3
votes
3answers
133 views

Are encrypted databases secure against all attacks?

If I use a database encryption package for oracle like dbms_crypto, would this be vulnerable to any attacks? I know that it uses algorithms like 3DES, AES, etc. These are all thigns that you can use ...
0
votes
2answers
65 views

Can GET Requests with Spring Rest controllers be intercepted by attackers?

I'm building a Spring app and a React app which also contains Chat functionality. I use WebSocket with RabbitMQ as message broker. I store the chat history as encrypted messages with AES, and before ...
2
votes
1answer
83 views

Is AES the recommended symmetric cipher for production level software?

I was considering developing an application level software for file encryption after stress testing many of my implementations of popular symmetric ciphers. I would love to support multiple ...
1
vote
3answers
198 views

Does WPA2 use TKIP or not?

I am writing my master's thesis about WLANs, and there is something what I don't really understand. This may be a dumb question but I didn't find a clear explanation. WPA uses encryption TKIP. WPA2 ...
0
votes
1answer
172 views

CTR: Why not XOR before AES

I just learned AES-CTR. I am wondering about the security of the CTR mode. It is basically an AES of the nonce with an XOR-Encryption at the end. Are this 2 assumptions correct? The nonce doesn't ...
1
vote
1answer
96 views

Integrity attacks and encryption at rest

The AES-GCM algorithm provides not only confidentiality but also integrity. I understand that integrity is an important part of security in overall, but whenever I think in terms of possible attacks, ...
2
votes
2answers
555 views

AES-256-GCM using GnuPG

Is there a way to encrypt files with AES 256 in the authenticated GCM mode using GPG? I don't see GCM in supported cipher modes. It seems that the GPG uses only one mode (its own modification of CFB)...
0
votes
0answers
58 views

Best approach to encrypt files on servers with AES-128

If you have the follows requirements: a list of files on the server file system to be encrypted / decrypted a database table named T_FILE_REPO in which the files are registered (id, name, ...) a ...

1
2 3 4 5
16