Questions tagged [aes]
The Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael.
883 questions
1
vote
1
answer
77
views
FIPS compliance and cipher implementations
I've written an parallelized implementation of the AES-CTR cipher using OpenSSL. Since you can precompute any block of keystream data based on the counter it's actually embarrassingly parallel which ...
- 111
1
vote
1
answer
138
views
Encrypting lookup IDs with AES-CTR, which nounce?
Normally I would talk a about a key/value store, but key is a bit confusing in the encryption context so lets talk about an encrypted ID/value store where IDs are used to look up data.
The IDs shall ...
- 133
3
votes
1
answer
4k
views
Are there any security concerns with this authentication flow?
I’m in the process of developing a native app and am currently trying to come up with a workflow to secure the communication between my app and the server.
I’ve done a lot of research and have not ...
- 41
2
votes
1
answer
668
views
Is there any reason to choose A256GCMKW over A256KW in JSON Web Encryption?
When implementing JSON Web Encryption (JWE), I understand the reasons why you might choose A256KW over DIR. But, now I notice there is also A256GCMKW as an optional part of the JWE standard (see ...
- 123
2
votes
1
answer
1k
views
Encryption to use when limited data for a chosen plaintext attack is available
Consider the following use case:
User can choose a key.
The key is used to encrypt files to be stored on a server.
Some file and directory names are easily guessed from the nature of the software, ...
- 133
1
vote
1
answer
161
views
AES-256 Encrypted Text Differs [closed]
I am learning about how AES encryption works. I understand the overall process, but I think I've missed something. Let's say I have this text to encrypt:
"vulkanski izbruh" – 16 characters (...
- 27
1
vote
1
answer
185
views
Does bearssl contain AES-GCM implementation?
In BearSSL webpage it has been claimed that bearssl supports AES/GCM
BearSSL currently implements AES/CBC, AES/GCM, AES/CCM and 3DES/CBC cipher suites.
But I can not find any function in its GitHub ...
- 113
9
votes
1
answer
1k
views
Is it Secure to Use a Single AES-GCM Encryption Key for an Entire Database if Unique IVs and Tags Are Generated?
I'm currently developing a backend service where I need to encrypt sensitive data stored in a database. I'm planning to use the AES-GCM (Galois/Counter Mode) encryption algorithm for this purpose.
My ...
- 93
5
votes
1
answer
877
views
In AES GCM, would using different nonces that are close reveal data?
Starting from a known nonce, AES GCM uses a counter to sequentially generate new numbers that are the input to the encryption function. If by chance two nonces from two distinct runs of AES GCM were ...
- 153
5
votes
2
answers
2k
views
What's a good way to append a nonce to ciphertext in Python for AES GCM in Python?
I'm not a security expert, so please excuse this question if it's silly, but I would really like an answer. I am using AES GCM to encrypt and would like to combine the randomly generated nonce with ...
- 53
2
votes
1
answer
311
views
Using PBKDF2 in combination with AES-KW defeats usage of BCrypt password hashes?
We are currently implementing envelope encryption for our app. That means, we need to derive a key from a user's password, which then will be used as a key encryption key(KEK) to wrap another key ...
- 377
3
votes
1
answer
812
views
Any information on the encrypted Knoppix user data file system (knoppix-data.aes)?
I remember about 90% of my password used for encrypting the persistent user data file system (stored as knoppix-data.aes) while setting up Knoppix a few years ago and would now like to explore the ...
- 33
2
votes
2
answers
439
views
Best way to symmetrically encrypt multiple files using a password
I would like to encrypt many files using symmetric encryption such as AES256, using a single memorised password.
I was planning to use gpg but gpg symmetric encryption does not work with --multifile ...
- 1,005
0
votes
1
answer
105
views
Is the example in the QUIC spec for header encryption wrong, or have I missed something?
In the QUIC spec, they've provided an example of header protection:
https://datatracker.ietf.org/doc/html/rfc9001#name-sample-packet-protection
They've got the following process (paraphrasing):
hp = ...
- 3
0
votes
2
answers
320
views
Impact of using the AES-GCM key as AEAD associated data
Will using the AES-GCM key as AEAD associated data potentially weaken the security or bring any adverse impact?
Before this question, perhaps I should ask, can an attacker extract AEAD associated data ...
- 101