Collaborate Disseminate
I’m reading FIPS 197 (AES) to try and understand how the algorithm works but I don’t yet have answer for are these two questions:
I see the 256 byte s-box for substituting during the rounds. Do the values in this 256 byte table get update… Continue reading AES substitution box and key expansion question
I have a question about security when using AES128 CBC over a single block with an IV than can be identical. I am fairly new to the subject and checked a few publications and documentation but I could not find a clear answer.
I am limited … Continue reading For AES128 CBC is the IV required to be different for a single block with random data? [migrated]
I have no advanced knowledge in cryptography.
Is it possible to recover the AES-256 key with the decrypted and encrypted message?
I’m interested in methods of wrapping an AES DEK (Data Encryption Key) using AES KEK (Key Encryption Key). Is there an advantage to using AES key wrap (rfc3394) as opposed to simply adding a random nonce to the DEK before encrypting it?
Co… Continue reading What is the advantage of AES key warp as opposed to adding a random nonce?
What are some of the risks when encrypting “plaintext” with a receiver’s public key?
I have been Googling for hours, and been reading in the Computer Security Principles and Practice 3rd edition.
It’s NOT similar:
In PGP, why not just encrypt message with recipient’s public key? Why the meta-encryption?
When we perform encryption with Public or Private Key, Asymmetric AES with RSA and CBC 128, and when we use the padding as well. Why do we have to bother adding the additional:
Key + IV?
******************
* Encrypted Key *
*************… Continue reading Why bother to generate Key, IV and encrypt them?
Proper security algorithms demand true random numbers. For instance, secret keys & initialization vectors should never not be true random.
However, generating numbers using Java’s Random library or C’s srand() initialization & then… Continue reading Pseudorandom vs. True Random
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]
Using the cipher suite “TLS_AES_128_CCM_SHA256”
This example is referring to a self signed certificate
If a server uses TLS and uses the cipher suite above? How does the certificate get signed if there is not an asymmetric private key to s… Continue reading How does a Cipher Suite Work without an Asymmetric Algorithm?