Collaborate Disseminate
Question is for transfer encrypted data between two services (Like HTTP, GRPC or etc…) Can I transfer IV and AuthTag in plain, Is this approach secure?
I have sample code in Node.js and I’m not crypto expert. See the code for more info:
… Continue reading AES-256-GCM transfer IV and AuthTag
I am using CryptoJS AES 256 encryption:
CryptoJS.AES.encrypt(realData, generateKey(passphrase), {iv: iv});
The secret is generated through:
function generateKey(passphrase) {
const salt = CryptoJS.lib.WordArray.random(128 / 8);
cons… Continue reading How safe is AES 256bitkey encoded in HEX, Base64?
I would like to store encrypted AES-256 keys in a public location and give 100 different people access to the AES key by using each of those 100 people’s public RSA encryption key to encrypt the AES key. How much does this degrade the encr… Continue reading If I use multiple different RSA public keys to encrypt a single AES key for distribution, how much does that degrade the encryption?
Long story short: I was using AES CBC PKCS5 on my image server, but I lost my keys (one key per image).
I know the first 61 bytes (the original and the encrypted) of each image plus I know the IV, and the key length is 256.
My question is … Continue reading Can I get AES CBC key from known plaintext, ciphertext, iv?
I am using CryptoJS AES 256 encryption:
CryptoJS.AES.encrypt(string, secret);
The secret is generated through:
function generateKey(str) {
const salt = CryptoJS.lib.WordArray.random(128 / 8);
const key512Bits = CryptoJS.PBKDF2(str, … Continue reading How to correctly convert a bit key to string for aes 256 encrytion?
I’m familiar with cryptography and I have basic knowledge about how encryption algorithms work such as RSA, AES and so on. I have an XML response encrypted with both AES and RSA.
I tried using OpenSSL to decrypt with several steps but am p… Continue reading Decrypt Soap xml encryptedKey session key using AES-128/PKCS-1#rsaes-kem-kdf2-kw-aes128
I’m using RNGCryptoServiceProvider.GetBytes(new byte[16]) to generate IV’s to use in AES (256 bits) encryption. For every record I encrypt, I generate a new IV.
I’m also prepending each of these IV’s to the encrypted text (to avoid storing… Continue reading IV generation with RNGCryptoServiceProvider
I have some data which I’m encrypting using Aes-Gcm.
Every time I have to encrypt the data, I generate a random nonce of the appropriate size, as well as an empty array for the tag data.
In Aes-Gcm, there is an option to provide AAD, or Ad… Continue reading Nonce in Aes-gcm AAD
I was thinking of implementing the following scheme for encryption of many independent files:
From the password, which is given by the user, generate a master key using for example HMAC-SHA.
From this master key, a subkey is derived for e… Continue reading Does using subkeys provide better protection in this instance?
There are a few questions on this site asking about reusing the same initialization vector for example for AES encryption under the same key, see for example this question.
Now, let’s not respect that advice and reuse an IV. However, to ma… Continue reading Reusing the IV, but not the key