Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

disk or file encryption using the TPM2_EncryptDecrypt2 command of the TPM

Are there any disk/file encryption methods that utilize the TPM2_EncryptDecrypt2 command? All TPM disk encryption tutorials I can find use the TPM to secure the disk encryption key, and not use the ...
  • 113
0 votes
1 answer
43 views

Generating AES 256 key from ECDH P-384

Is there anything wrong with hashing(with SHA256) the shared secret generated by ECDH that is 384 bits long and using that as the AES key? Is there a difference between that and, say, truncating the ...
1 vote
1 answer
31 views

javascript: how to apply block cipher to byte stream

I am writing browser javascript that has a pre-shared key with nonce, and creates a binary websocket connection. How can I apply block encryption-authentication such as AES-GCM to the messages? Is it ...
0 votes
0 answers
31 views

Recovering the key of a lost BitLocker volume

I have a 1TB HDD encrypted with BitLocker. It was set up in a way that when I'd boot Windows it would automatically mount it using the key. (I believe it is stored in some kind of .BEK file) I no ...
1 vote
0 answers
31 views

Symmetric key importance During encrypt and decrypt

I am performing a small command line operation the goal is to generate a symmetric key using openssl and store the key in TPM FAPI keystore. Issue--> after modifying the symmetric key , the ...
  • 151
3 votes
0 answers
276 views

Strongest symmetric algorithm in 2022 [duplicate]

I'm curious about the best encryption algorithm for encrypting my files in 2022? I thought it was a good solution to encrypt my private key with AES-256 but I decided to ask here and choose better ...
  • 159
0 votes
2 answers
77 views

AES Encryption as XSS protection for url parameters?

So, I found a website that uses AES encryption to prevent XSS and I'm wondering if this approach is inherently flawed. It has an endpoint like execute.php?code=encryptedPayload which de-crypts the ...
  • 148
1 vote
2 answers
719 views

Generate AES-256-GCM key

I'm using aes-256-gcm encryption. I used a sample key provided in the docs and it works fine. I also tried a key generated from here and it works fine. There's no option to specify gcm here yet the ...
1 vote
1 answer
42 views

How to encrypt peer data exchange?

The situation currently is as follows: All our devices in the same network broadcast their state (alongside with unique IDs) over the network. They also listen in for broadcasts of others. Everything ...
  • 223
1 vote
0 answers
16 views

Can parts of WebCrypto AES-GCM be reused between encryptions

I am trying to better understand the processes involved in e2ee using WebCrypto on the browser. I understand that the only real method to use a passphrase to generate a symmetric key on the browser is ...
  • 111
1 vote
1 answer
80 views

Where is the AES key of ransomware stored (in the file header/trailer)?

Advanced types of Ransomware generate, usually, an AES 128 bit key (used to encrypt files, some types of ransomware use a unique AES key for each file). This key is generated on the fly. In addition, ...
  • 35
0 votes
0 answers
28 views

Is it possible to hack encrypted external HDD,if you have access to it? [duplicate]

If I lose my external HDD and somebody finds it and tries to hack, will he succeed?Is it possible to get data from encrypted disk by disassembling it and working with platters? HDD is APFS AES 256 ...
0 votes
1 answer
187 views

Is it safe to store data on APFS 256 AES encrypted external HDD disk?

I'm using a MacBook and want to store confidential data (financial documents, passwords, private photos, etc.) on an external HDD disk. How safe is setting up APFS AES 256 encryption with disk ...
0 votes
1 answer
58 views

Probability of getting different plaintext with different key

What is the probability that an AES encrypted file, using a wrong password, gets decrypted to something different than the plaintext, but which could still be likely to be interpreted an the true ...
  • 15.5k
2 votes
1 answer
834 views

CryptoJS AES encryption/decryption problem

A simple encryption/decryption using CryptoJS gives me a weird output. Can anyone point me to where the code is wrong? (I'm looking for the output in the console) var code = "Testcode"; var ...
  • 23
0 votes
1 answer
47 views

Is having a seperate server to handle encryption operations a secure way to protect a private key for a web application?

Assume I have two servers which are part of a production environment for a web application which handles sensitive user data. The first server is a ruby on rails application, and the second is a ...
  • 236
1 vote
1 answer
154 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
-1 votes
2 answers
249 views

Is possible to reverse engineer a AES encryption of a known file format?

If the encrypted file is from one of the known formats, such as doc, jpg, mp3, etc., is it possible to reverse engineer it and decrypt it? I "roughly" know the mechanic behind the AES ...
2 votes
0 answers
71 views

Kaspersky Total Security Data Vault encryption AES256 BUT with "effective key-length 56bit"

While comparing Kaspersky Total Security (KST) with Kaspersky Internet Security (KIS). One of the "extras" of KTS is the added "feature" of "Data Vaults", which "...
-2 votes
1 answer
114 views

AES - Is it sensitive to let anyone encrypt a message only you can decrypt?

I have an application in which some data can be encrypted through AES. Such data can emanate from multiple sources I may not know. For practical reasons I want those sources to be able to encrypt ...
1 vote
1 answer
134 views

Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?

In Tor, when a client communicates with an entry node, they exchange the parameters such as the prime number and the generator with each other through DH. What about when an entry node communicating ...
1 vote
3 answers
453 views

AES Encryption vs hash function with the strong assumption of input size and secure key?

There are plenty of questions about the difference between AES encryption and hash functions. I read some of them and the general answer is that AES is reversible as long as the key is exposed. AES ...
  • 11
0 votes
1 answer
53 views

Soundex and encryption : good friend?

We are considering using the Soundex algorithm to improve our search capabilities in our app. Our app data are encrypted in the DB. (EAS256) The Soundex result will be stored in clear next to our ...
0 votes
0 answers
24 views

Can a AES 256 key be recovered with the encrypted and decrypted message? [duplicate]

I have no advanced knowledge in cryptography. Is it possible to recover the AES-256 key with the decrypted and encrypted message?
  • 101
1 vote
0 answers
28 views

Why is it not a good idea to simply encrypt the plaintext with the receiver’s public key? [duplicate]

What are some of the risks when encrypting "plaintext" with a receiver's public key? I have been Googling for hours, and been reading in the Computer Security Principles and Practice 3rd ...
15 votes
5 answers
4k views

Pseudorandom vs. True Random

Proper security algorithms demand true random numbers. For instance, secret keys & initialization vectors should never not be true random. However, generating numbers using Java's Random library ...
0 votes
1 answer
113 views

How does a Cipher Suite Work without an Asymmetric Algorithm? [closed]

Using the cipher suite “TLS_AES_128_CCM_SHA256” This example is referring to a self signed certificate If a server uses TLS and uses the cipher suite above? How does the certificate get signed if ...
  • 1
0 votes
2 answers
81 views

Is it possible to eavesdrop HTTPS encryptions by file size?

I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when ...
  • 101
0 votes
1 answer
77 views

Ownership proof scheme

I'm developing a device that will require ownership proof to activate HOTP authorizations. The HOTP codes will be used in the BLE bonding between the device and the owner's phone. I came up with the ...
  • 3
1 vote
0 answers
269 views

File encryption with Python and AES

I need to write a Python script to occasionally encrypt some small text files (~10 Kb) in order to store them in an insecure environment. Each file will be encrypted via unique symmetric key and AES ...
  • 11
5 votes
1 answer
272 views

Design of a web based password vault

I'm designing a password vault that's accessible to clients through an existing web application. The clients are small, (and mostly non-technical) businesses that aren't using password managers, but ...
4 votes
2 answers
422 views

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

I would like to know what encryption 1Password uses. On the About the 1Password security model page, it says: Your 1Password data is kept safe by AES-GCM-256 authenticated encryption. The data you ...
  • 143
0 votes
2 answers
136 views

How to be sure there are only encrypted data on my backend

I am coding an online password manager as part of my apprenticeship. I have already coded the full backend to synchronize the encrypted data and a frontend that encrypts and decrypts data with AES. So ...
12 votes
2 answers
4k views

Do I need to use TLS if data is already encrypted and gets decrypted client-side?

We are serving static content over the internet, and have a business requirement that the data must be encrypted at rest. Currently it is stored in AWS S3, where it can be accessed by authorized ...
  • 131
0 votes
0 answers
78 views

Step-by-step file encryption/decryption using user-supplied password

Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
  • 101
0 votes
1 answer
287 views

How to encrypt/store private key, if login is with biometrics/OTP/Sign in with Google

I am creating a cross-platform application, in which I am encrypting all data using AES-GSM. So my problem is that I want to store private keys locally on the user's device (either Android, IOS, Web, ...
  • 103
0 votes
1 answer
362 views

Intercepting responses using mitmproxy in Python. Problem in decryption

I have set up MitmProxy with a Python script to intercept network responses from one domain, used by a Desktop App. However, when I start up the App, I get the following series of transactions { &...
0 votes
1 answer
312 views

Can aes256 be cracked with math.random

I read this https://medium.com/@betable/tifu-by-using-math-random-f1c308c4fd9d and if the key is generated with an old browser using math.random via chrome v8, could the AES encrypted message be ...
  • 1
1 vote
1 answer
134 views

Is there any benefit to encrypting a derived key?

I'm working on updating the encryption method of a class at work. The encrypt and decrypt methods take the text to encrypt/decrypt and a string which used to be used as a salt (this string is ...
  • 11
0 votes
1 answer
284 views

What is the best way to encrypt extremely sensitive and important data

I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines. I understand ...
  • 781
0 votes
0 answers
127 views

What is more secure: encrypting individual files in archive or encrypting the archive itself?

Let's assume we have symmetric crypto with the same IV for each operation. From my perspective, encrypting the whole archive is better, as similar strings are compacted and the CBC will work for us ...
  • 101
0 votes
0 answers
200 views

Specification of AES-based PKCS#5 Password-Based Encryption (PBE)

recently I had a look at the capabilities of the Java keytool to create PKCS#12 containers with a protected private key. According to the standard a private key is protected using a PKCS#8 shrouded ...
2 votes
1 answer
912 views

AES256 - 7zip Vs GPG

I noticed that 7zip provides an option to encrypt the contents of a folder using AES256 (Screenshot Below) and so does GPG using this command: gpgtar --output <Name_Of_The_Output_File> -v --...
  • 616
2 votes
1 answer
253 views

Use pre-computed PBKDF2 key with high iteration count as password

We provide web redirection based integration with our partners' web apps. The flow is something like the following, and the password is generated randomly and shared with them during the onboarding ...
1 vote
1 answer
521 views

How are AES-256 keys generated using hardware random number generator?

I know about key derivation functions such as PBKDF2 which derive keys from passwords. That said, I am having hard time wrapping my mind around how AES-256 keys are generated using hardware random ...
0 votes
1 answer
171 views

Are AES-256 keys essentially unsigned integers between 0 and 2^256-1 padded with zeros?

I know about key derivation functions such as PBKDF2 which derive keys from passwords. Am I wrong in assuming AES-256 keys are essentially unsigned integers between 0 and 2^256-1 padded with zeros?
2 votes
1 answer
216 views

How to convert passphrase to AES256 key?

My plan is to convert a passphrase in UTF-8 ASCII-US to Unit8Array(32) then use it in: 256bitsKey = Unit8Array(32) from passphase iv = window.crypto.getRandomValues(new Uint8Array(32)); CryptoJS.enc....
  • 145
1 vote
1 answer
190 views

AES-256 without key stretching

It is not so difficult to create a password which is exactly 32 characters long. In this question - AES-256 Key Length Importance @Marc writes: you absolutely should not be using a password as the ...
  • 359
1 vote
1 answer
1k views

AES-256-GCM transfer IV and AuthTag

Question is for transfer encrypted data between two services (Like HTTP, GRPC or etc...) Can I transfer IV and AuthTag in plain, Is this approach secure? I have sample code in Node.js and I'm not ...
  • 113
1 vote
1 answer
706 views

How safe is AES 256bitkey encoded in HEX, Base64?

I am using CryptoJS AES 256 encryption: CryptoJS.AES.encrypt(realData, generateKey(passphrase), {iv: iv}); The secret is generated through: function generateKey(passphrase) { const salt = CryptoJS....
  • 145

1
2 3 4 5
17