Collaborate Disseminate
AES/ECB is commonly considered "weak" to the point that some static analysis software identifies it as not secure and suggests using AES/CBC instead.
The question is: what if size of encrypted input is always less or equal 16 byt… Continue reading AES/ECB vs AES/CBC for <16 bytes [migrated]
I’m questioning the password used in a key derivation function, whether It makes sense to make it unique for every generated symmetric key and why
Continue reading Password relevance in key derivation function
I have a particular cryptographic scenario where the following activities take place and conditions must be met:
User A is part of an organisation which shares all data storage internally.
User A wants to upload a file to the data storag… Continue reading Client-side File Encryption With Synchronized Sharing
I am trying to decode my 128-bit AES key to string to store it in database. I have tried using Python built-in decode() with ascii and utf-8 codecs but it is not working.
Continue reading How can I convert 128-bit AES encryption key to a string using Python? [migrated]
I tried setting iv or not setting iv, but encrypted messages were always different.
import CryptoJS from "crypto-js";
const iv = CryptoJS.lib.WordArray.create([0x20212223, 0x24252627, 0x28292a2b, 0x2c2d2e2f]);
const a = CryptoJS…. Continue reading How to generate the same AES encrypted message in crypto-js? [migrated]
I have a need to encrypt OAuth access and refresh tokens stored in the Google Cloud Datastore.
The goal here is to ensure that if the Datastore entities are accessed independently of the code, the OAuth tokens will be encrypted and thus un… Continue reading PyCrypto based encrypted Property class for Google App Engine standard – is this AES implementation secure
Is there a standard format for storing/exchanging encrypted data along with the key needed to decrypt it (data is encrypted with a single use symmetric key and the symmetric key itself is encrypted with asymmetric key for the receiver)?
Assuming the hacker has access to the ciphers of each of the versions, will it help him/her to decipher the original file(s) by doing some sort of comparison of the ciphers?
I am playing around with disk encryption. https://gitlab.com/cryptsetup/cryptsetup/-/wikis/DMCrypt#iv-generators says:
essiv: “encrypted sector|salt initial vector”, the sector number is encrypted with the bulk cipher using a salt as k… Continue reading AES-256 ESSIV in dm-crypt
I found a client-server application where the server creates a random AES-256-CBC key, and gives this key to the client for use as an authentication token. The key is used on the server to encrypt a string describing the user’s privilege l… Continue reading Data integrity when AES key can be modified