Questions tagged [aes]

The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.

72 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
156 views

How to safely store the most recently used encryption password for subsequent reuse in an app?

Let's say I have a mobile app that can save photos inside password-protected AES-128 encrypted PDF files. For convenience, I want the user to be able to encrypt a file using the previously-used ...
4
votes
0answers
115 views

Encryption data keys in single file at same location

I have an external storage which I am wanting to store encrypted files. Strategy #1: Each file and folder name is AES encrypted with its own data key All data keys are saved into a single datakeys....
3
votes
0answers
168 views

Why does the openssh-server not use GCM by default?

Well the question is as simple as that . Because I recently noticed that the openssh-server uses AES-CTR for the symmetric encryption and I wondered why ? From what I heared AES-CTR is a block cipher ...
3
votes
0answers
92 views

How dangerous is it to transmit the last N bytes of a datagram in plaintext?

I'm developing software for a university satellite project, and am currently working on the communications protocols. Here are the restrictions: Radio packets should be assumed to be no larger than ...
3
votes
0answers
628 views

Specify AES key when using gpg

When using gpg to encrypt/decrypt a file with AES-256, is it possible to specify the 256-bit key directly (rather than have it derived from a passphrase)?
2
votes
3answers
189 views

Should I chunk or not for AES-GCM file encryption

New to file encryption. Need to use AES-GCM for file encryption, can't change the alg. Heard about the max plain text size should be 64GB with same key and IV pair. Environment is python 3 with ...
2
votes
0answers
147 views

Is using AES secure for password managers?

I'm developing an application that automates processes. The user connects to many accounts that the application uses then passwords are encrypted using AES. An example algorithm looks like this: ...
2
votes
0answers
67 views

Why is MySQL 8.0 AES_ENCODE unsafe for statement-based replication?

I read this interesting note in the MySQL 8.0 documentation that seemed a bit confusing to me: Statements that use AES_ENCRYPT() or AES_DECRYPT() are unsafe for statement-based replication. As I ...
2
votes
0answers
60 views

What is this key management scheme called

We are building a system, where the messages between services is encrypted with Data Encryption Key (DEK). The DEK is attached to the message, but encrypted with another key, Key Encryption Key (KEK)....
2
votes
0answers
3k views

Using PBKDF2 for hash and AES key generation implementation

I am writing a Java application that is required to locally authenticate a user with a password and then use the password to generate an AES-256 key for local file encryption/decryption. I understand ...
2
votes
0answers
91 views

Custom keystore/certificate to hold asymmetric (RSA) keys

My app will require maintaining an RSA keypair locally on the user's machine. I was a bit disappointed to discover that PKCS#12 and JKS don't offer higher than 3DES (correct me if I have this wrong). ...
2
votes
0answers
124 views

How can I verify the algorithm used for FDE is actually AES-128?

I would like to check whether the algorithm that is used to encrypt my SSD drive is actually AES-128. I wanted to read the raw disk data, encrypt them myself and then diff the data against the ...
2
votes
0answers
96 views

Is this a valid approach for multi-sign?

Requirement: An "arbitrary text" should be encrypted, and keys distributed among 3 people, atleast two keys are needed to unlock. Here is how I plan to do it, please let me know if I'm missing ...
2
votes
0answers
92 views

Authentication tag lengths of AES-CCM in TLS

I'm catching up on understanding some of the new cipher suites that are appearing in TLSv1.2 and will be making an appearance in 1.3. While looking through AES-CCM, I discovered that it offers a ...
2
votes
0answers
80 views

Security implications of providing an encryption/decryption oracle

I need to provide a service that acts as a symetric encryption/decryption blackbox : the box get a secret key k users send datas d, and get ciphertext c = Encrypt(d,k) users send ciphertext c, and ...
2
votes
0answers
671 views

Is it safe to store the AES passphrase encrypted with the resulting AES key?

I found out that an encryption tool encrypts and stores the passphrase entered by the user and used to generate the AES key in addition of the encrypted payload. Pseudocode: key = md5(passphrase) iv ...
1
vote
0answers
53 views

iStorage DatAshur PRO AES-XTS 256-bit - 15 Digit Pin Time Til Brute Force

I am looking into the above encrypted usb drive, however, my concern is that its only a 15 digit pin of numeric characters, and I am not sure how to do the math on time til brute force... Is a 15 ...
1
vote
0answers
53 views

operation mode of an encryption algorithm

The operating mode of an encryption algorithm, especially a block cipher, describes how to use the encryption function for a single block repeatedly to encrypt or decrypt an entire messages with a ...
1
vote
0answers
121 views

Why does OpenSSL fail to decrypt when the key is too large?

I have the following groovy script: cmd1 = "echo ${really_long_key}" ssl_cmd = "openssl aes-256-cbc -md md5 -nosalt -a -pass pass:${encryptPassword} dec" def process = cmd1.execute() | ssl_cmd....
1
vote
0answers
101 views

Help me understand Encryptpad and 7-zip for encryption

I was looking to encrypt some text files (containing sensitive data) so I could safely keep them online (e.g. Google drive). I have found three options: 7-zip, which does AES-256 Encryptpad, which ...
1
vote
0answers
429 views

How to recover forgotten AES-256 password with bruce force?

The password was set on a flash drive using LaCie Private-Public for Windows 10. The password is 12 character long. For each character, I know if it is a number, special character, lower case letter ...
1
vote
0answers
206 views

Security of “queryable” encryption?

Spring Security has a utility method called Encryptors.queryableText. The explanation for it is: The difference between a queryable TextEncryptor and a standard TextEncryptor has to do with ...
1
vote
0answers
47 views

How is the key shared between tag and reader in RFID mutual AES protocol?

In the RFID mutual authentication protocol, how and where are data stored? What data is stored in the tag, reader and server (database) before first time of communication? For example, in the AES-128 ...
1
vote
0answers
43 views

Is this protection for customer data both secure and fast enough?

A small electrical installation company has a big list of customers. The list contains personal information like names, phone numbers, addresses, info (like what product/installation) and some small ...
1
vote
0answers
2k views

Is Crypto-JS AES library still considered secure?

My company has to send out passwords to employees. We want to do so by using the Crypto-JS AES library to locally create the encrypted message and then send the encrypted message to the employee so ...
1
vote
0answers
298 views

What's better when RSA-encrypting an AES passphrase: more data or better padding?

An application encrypts data with AES (aes-256-cbc) using a key and IV derived from a randomly-generated pass-phrase (openssl enc -pass...). It encrypts the pass-phrase with 2048-bit RSA. So the pass ...
1
vote
0answers
476 views

Are there any DUKPT / AES standards or recommendations?

Are there any standards or industry practices with respect to the implementation of DUKPT with AES (as opposed to DUKPT / TDEA which is covered by ANSI X9.24-1:2009)? Understanding that DUKPT is a ...
1
vote
0answers
36 views

A query with message block and gray code in LightMAC

In lightMAC the message is divided in to M[1] M[2] and so on eg: M[1]M[2]···M[l] ←− M If we consider AES block cipher 128-bit then I am wondering is the size of individual message block is 128-bit ...
1
vote
0answers
4k views

IPSec - Configuration best practices, performance, and realistic tradeoffs for my chosen Ciphers

I understand the term "best" is subjective but I would like to try to keep this discussion as objective as possible and get the opinion of other security professionals for my chosen cipher suite ...
1
vote
0answers
109 views

How to generate and manage symetric cryptographic keys with GPG and SKS?

I work on people and companies databases requiring high confidentiality. Input data (mostly clear XML files) is loaded into an Oracle database, and sensitive columns are encrypted using AES265 ...
1
vote
0answers
290 views

AES256 key exchange

I'm trying to get a secure way of exchanging keys between my client application and the server. The goal is to encrypt all XML messages with AES256. These XML's will be transferred to the server ...
1
vote
0answers
731 views

How could I encrypt an SD card to store data on it?

I have some data I'd like to carry with me in an encrypted form onto an SD card, so I (and only I) can access it easily from any OS (or at least Windows, OSX and Ubuntu). My idea was like: Two ...
1
vote
0answers
281 views

Clarification of RSA Key Exchange (TLS 1.2) and AES for On-Going Message Excahnge

I'm trying to understand the full flow of key exchanges for secure communications. As a potentially incorrect premise, I am under the impression that RSA is a good asymmetric technique for ...
1
vote
0answers
84 views

when/how does an encrypted volume .dmg change to reflect the file system it stores

I'm trying to verify that storing a .dmg file stays encrypted while only the mounted file system is unencrypted (see here). My thought was to create a .dmg containing a text file, make a copy of the ....
1
vote
0answers
672 views

How to decrypt the my 1Password Vault without using the 1Password App?

I would like to know, how someone can decrypt his 1Password Vault without using the 1Password app. It should be feasible. Right? In a nutshel, My Master Password is the only "AES key" that my logins/...
1
vote
0answers
415 views

AES keyfile size

I would like to encrypt files using a key file instead of a password. What I would do is: 1) Generate X random bits using openssl rand X > mykey 2) openssl enc -aes-256-cbc -in secretfile -out ...
1
vote
0answers
258 views

OpenSSL is not giving correct result for encryption and decryption for FIPS test vector for AES -CFB1

I am running FIPS test vectors against AES-CFB. I am getting correct results for aes-cfb128 and aes-cfb8 but getting wrong results for aes-cfb1. The values being used by me for aes-cfb1 tests are: ...
1
vote
0answers
313 views

How can I use session salt for encrypting data using AES in CTR mode?

I have to implement a crypto-plugin in Java. The approach followed is conceptually similar to that used for SRTP. The algorithm used for data confidentiality is AES in CTR mode (I'm following a ...
1
vote
0answers
181 views

Are there “standard” formats for storing GCM output?

The openssl enc -aes-256-gcm command is broken, because it can't decrypt its own output, otherwise I would look to that as a format. In order to decrypt a file, code needs to be able to separate the ...
1
vote
0answers
59 views

AES and message properties

An active attacker changes the ciphertext which was made using the AES cipher algorithm. Which message properties are preserved even though that change was made. Choose one of the below: 1) Integrity ...
1
vote
0answers
152 views

Why do we need salt and RFC in generating AES encrypted message

I'm not very familiar with encryption and new to this, I'm just learning it right now by code review of one of the class we have in an application to encrypt a password using AES. Would anyone explain ...
1
vote
0answers
438 views

Gladman's file encryption library = AES in counter mode with HMAC-SHA1 authentication?

I would like to use Gladman's algorithm to create AES encrypted data in JavaScript. I use the Crypto-JS library, but its performance is horrible. PBKDF2 is terribly slow, so I switched to another ...
1
vote
0answers
240 views

P2P sharing of uniquely encrypted files

I need a way to share large, uniquely encrypted files (AES256) that are actually the same file when decrypted, through P2P, to optimize download speeds. For instance, a centralized server would ...
1
vote
1answer
629 views

Is it secure to store encryption key (encrypted with master key) with the data it was used to encrypt?

I am working on a password sharing web site. I would like users to be able to enter their credentials and share them with other users. I am thinking about using KMS service to store master key (just ...
1
vote
1answer
154 views

Client Side Encryption algorithm: security + is padding algorithm needed in this case?

I will be using CSE for a web application as follows. Generate a random AES key Encrypt the cleartext data with this AES key Encrypt the AES key with the service's public key, using RSA Obviously, ...
1
vote
1answer
350 views

Need help designing an encryption workflow

Background: I'm building a .NET application, a very small part of this application allows for users to communicate with a third party application. I am designing this aspect. The third party simply ...
0
votes
0answers
43 views

Is AES ECB mode safe for one block Encryption then MAC with same key?

I want to do something really basic but I need to be sure that the process is safe : Problem Alice and Bob have to agree on a secret 6 digits PIN. They each have a pre-shared aes symetric key k and ...
0
votes
2answers
47 views

Save private key in a database to share between multiple accounts

I don't know if my concept would be secure so I ask here. The main purpose is to log in with password x and also use that password to encrypt an RSA private key with AES to store that in the main ...
0
votes
0answers
31 views

What is known about the strength or weakness of the PBEWITHSHA256AND128BITAES-CBC-BC algorithm?

Is PBEWITHSHA256AND128BITAES-CBC-BC known to be outdated or is it considered robust? Is it sufficient in applications that need to protect PII? Thanks.
0
votes
2answers
49 views

Can GET Requests with Spring Rest controllers be intercepted by attackers?

I'm building a Spring app and a React app which also contains Chat functionality. I use WebSocket with RabbitMQ as message broker. I store the chat history as encrypted messages with AES, and before ...