Questions tagged [aes]

AES (advanced encryption standard) is an encryption algorithm which is used by organizations like U.S. Department of Defense and standardized by the NIST (National Institute of Standards and Time).

Filter by
Sorted by
Tagged with
5 votes
2 answers
1k views

Does AES 256 GCM have any restricted byte sequences imposed on its cypher text?

Specifically I am inquiring, if the cypher text can include a byte sequence such as 170303, which is one possible TLS record header. Normally the application that parses the TCP byte stream delimits ...
22 votes
4 answers
40k views

Is it better to use Bitlocker or the built-in-drive-encryption that my SSD offers?

My system: Intel Core i7-4790, which supports AES-NI ASUS Z97-PRO mobo Samsung 250GB EVO SSD (with built-in encryption option) 64-bit Windows 7 If I just want to encrypt my boot drive with AES256 or ...
1 vote
1 answer
4k views

Is there an AES 256 LUKS encryption option in Fedora?

it was suggested that my post (https://security.stackexchange.com/questions/73140/is-there-an-aes-256-luks-encryption-option-in-fedora?noredirect=1#comment120019_73140) would be better if I asked it ...
5 votes
1 answer
2k views

LibreSSL aes encryption incompatible with OpenSSL?

Machine A has OpenSSL 1.0.2k and I encrypt a dummy file like this: openssl enc -aes-256-cbc -salt -in plain.txt -e -pass pass:abcd1234 -out cipher.enc Machine B has LibreSSL 3.3.3 and when I decrypt ...
8 votes
2 answers
26k views

How to encrypt txt files with AES256 via Windows 7z command line?

I have 7z on windows , and I want to encrypt 1 txt file with AES256 via 7z command line. How can I do it please?
1 vote
1 answer
2k views

Generate symmetric key in openssl

I need to generate 128 bit symmetric key according to AES standard in openSSL. Unfortunately I can't find one in openssl. How to generate symmetric key?
10 votes
1 answer
75k views

How can I encrypt / decrypt AES-256 CBC with OpenSSL?

I just installed Linux (Ubuntu) for the first time and downloaded package OpenSSL as well. Opened command line too and tried some commands but none of them worked. So what I have is initial vector: ...
2 votes
0 answers
306 views

create zip format whose AES password is UTF international letters

for reason beyond me we want to create zip format encrypted with AES-256, whose password can be International, on Linux. If we use 7-zip, I found it works when creating 7z file, ie the following works:...
6 votes
3 answers
4k views

Disk encryption: advantages and drawbacks of hardware disk encription vs dm-crypt

I'm going to reinstall my system (Ubuntu) on a Samsung 840 pro SSD. This disk can do AES hardware encryption. I wonder what would be the drawbacks and/or advantages of taking this approach versus ...
1 vote
0 answers
3k views

How to download aes encrypted m3u8 using ffmpeg?

I tried to download a m3u8 video that seems to be AES encrypted using ffmpeg. I tried several method and could not figure out how to download it, eg this method: How to download aes encrypted m3u8 ...
1 vote
1 answer
2k views

How is the IV embedded in an encrypted file when you do not indicate it?

Suppose I encrypt with a key "1234" a file containing "abcd" with: openssl enc -iv BABA -aes128 -in file.txt -out file.enc -p I get: salt=1B929D9049534D22 key=...
5 votes
1 answer
12k views

OpenSSL gives "iv undefined" for AES-256-ECB

Can anyone spot why this command gives "iv undefined"? >openssl.exe enc -d -aes-256-ecb -K 8000000000000000000000000000000000000000000000000000000000000001 -in ex3.8_C.bin -out plaintext.bin -...
0 votes
1 answer
106 views

UEFI Encrypt disk on boot

I want to make UEFI/UFI encrypt disk with AES on boot, is it possible? If yes, how can it be done?
user avatar
1 vote
1 answer
2k views

Unable to restore the veracrypt volume after quick format

Encrypted 256 GB volume of a 1 TB HDD using VeraCrypt. (standard AES) Password is known. No rescue disk, keys available. Problem: My friend formatted the encrypted drive using the quick format and ...
1 vote
1 answer
4k views

Decrypt video encrypted with FFmpeg cenc-aes-ctr using other non-FFmpeg tool

I have a video that is encrypted using FFmpeg cenc-aes-ctr: ffmpeg -encryption_schema cenc-aes-ctr \ -encryption_key someRandomKey \ -encryption_kid someRandomKid \ -i video.mp4 encrypted.mp4 Now I ...
0 votes
1 answer
213 views

What is module aes-i586?

I'm using LMDE4 with LVM on LUKS and recently I've been getting these cryptic error messages at boot: modprobe: module aes-i586 not found in modules.dep Volume group "lvmlmde" not found ...
3 votes
3 answers
5k views

Is it possible to encrypt a file when adding it to an old zipped folder with 7zip?

So, I've been encrypting my online backups with AES 256 using 7zip. However, when I go to add a file to the old archive by opening it with 7zip and dragging the file I want to add into the 7zip window ...
0 votes
0 answers
522 views

Decrypt AES 128 encrypted file with a key file

I have a file which is encrypted using AES 128 and I have a key file. How can I decrypt the file using the key file? The key file has no extension, I opened it in notepad and it has bizarre text.
0 votes
1 answer
1k views

Equivalent hashcat commands for a openssl-enc command?

This is to find the passphrase for a block cipher. A test generated cipher can be decrypted using $ openssl enc -d -aes-256-cbc -md md5 -a -in filename which prompts via th console for the password. ...
3 votes
0 answers
80 views

File/Dir/Tar encryption pipeline - what md/cipher/mode?

I'm piping the results of a tar operation into openssl. File size is typically less than 10GiB. I've been doing some reading and come up with what I think would be considered secure and fast enough in ...
1 vote
1 answer
228 views

Does 7zip for Linux support AES-NI?

I am looking to encrypt a set of fairly large files using well supported, ideally cross-platform software. I understand that 7zip uses 256 bit AES encryption. Does anyone know if standard Linux ...
-1 votes
1 answer
2k views

OpenSSL performance test on a specific file

I m new in this world of Cryptography. I`m trying to check the performance of the various algorithms on with OpenSSL. Looking on the internet I find this command : openssl speed aes-128-cbc des ...
8 votes
0 answers
8k views

Does Raspberry Pi 4 support AES hardware acceleration?

I have Raspberry Pi 4 B (4GB version), I wonder if it supports AES hardware acceleration (so some special instruction set for CPU for faster encryption). According to https://en.wikipedia.org/wiki/...
45 votes
1 answer
52k views

How do I fix "WARNING: message was not integrity protected" when using GPG symmetrical encryption?

I've encrypted a file using symmetric encryption like this: gpg --symmetric myfile which results in a file myfile.gpg. Alright. Now let's decrypt the file again: gpg -o myfile --decrypt myfile.gpg ...
0 votes
1 answer
1k views

Aes256-cbc encoding/decrypting error

I have been using gibberish.aes javascript code to encrypt some strings but when using a password such as £ or á, openssl command line does not want to decrypt it and spits out randomness but it works ...
0 votes
0 answers
3k views

Generate Private Key with AES 256 CTR

How to generate a private key with AES 256-CTR ? I need a private key with CTR as CBC is no longer supported by my client. Please advise Details: We need to connect to an SFTP instance of client ...
2 votes
1 answer
5k views

What is the default encryption key-size for dm-crypt / cryptsetup in LUKS mode?

I'm using cryptsetup 2.1.0, for which the default encryption options are (as reported by cryptsetup --help): Default compiled-in device cipher parameters: LUKS: aes-xts-plain64, Key: 256 bits, ...
4 votes
1 answer
2k views

How to get Outlook 2013 to encrypt using AES and not 3DES

In my company we are exchanging emails with a government authority once a month and they require us to encrypt those emails with encryption algorithm AES-128, AES-192 or AES-256. For the purpose we ...
0 votes
1 answer
3k views

What's the best option for encrypting a file with openssl and a password?

I'm using a command to encrypt and decrypt files based on a password: openssl aes-256-cbc -a -salt -in secrets.txt -out secrets.txt.enc --pass pass:mypassword and openssl aes-256-cbc -d -a -in ...
11 votes
5 answers
14k views

Is it safe to store my passwords in an encrypted .7z/.zip by 7-zip?

Here is what I do: Type in all kinds of passwords in an excel file (.xlsx) Zip it with a password by 7-zip AES 256 length > 8 combination of A-Z a-z 0-9 symbols different from any other ...
0 votes
0 answers
337 views

Is it safe to store the encrypted private key of a RSA pair on the same machine as the encrypted data?

I was not sure how to google this. I want to set up a storage server where I encrypt everything that is sent to it, from anywhere. The files sent to it would automatically get encrypted by the public ...
4 votes
1 answer
24k views

How do I fix a cipher mismatch issue with sftp?

I'm running into an issue where a server was upgraded to RHEL 6.5, and we have automated bash scripts on an RHEL 5.9 install that connects through sftp and ssh commands. Now, the new server only ...
1 vote
2 answers
25k views

Is it possible to add a cipher for an sftp client?

I'm running into an issue where a server was upgraded to RHEL 6.5, and we have automated scripts on an RHEL 5.9 install that connects through sftp and ssh commands. Now, the new server only supports ...
0 votes
1 answer
7k views

Android - recover encrypted images

I have nearly 0 understanding of encryption, I just want to recover my old photos. In my old Android phone I used a certain photo-video locking app to encrypt my images. Images were stored on SD card....
3 votes
3 answers
17k views

Unable to decrypt AES with OpenSSL

I am working on a ctf game: Encrypted with AES in ECB mode. All values base64 encoded ciphertext = 8LBUVZfDfI6wnggG1uUYuQsRoGd08pGwHCN++R5rabMW9PJmWHWcSrjy5Tfffj6L key = 3q1FxGhuZ5fQYbjzDxgQ35== I ...
1 vote
1 answer
798 views

Few initial character are missing while AES decryption using openssl

I have done the encryption for the file through code using IVStatic = true and keysize = 256. Now I am trying to decrypt the file using openssl commands. I extracted IV from the IV from the file. ...
0 votes
1 answer
676 views

HMAC GCM failure

I am trying to configure for IPSEC GCM- this is the error I keep getting: Error(s): 'encryption-algorithm aes-256-gcm' 1) HMAC Authentication is not compatible with AES-GCM 2) commit failed: (...
5 votes
1 answer
1k views

Intel's AES-NI performance: Isn't the hard drive the bottleneck?

Will I see a performance gain with AES-NI using dm-crypt/LUKS for hard drive system encryption? Isn't the hard drive the bottleneck even without hardware acceleration?
1 vote
0 answers
178 views

OpenSSL Pads Keys in AES encryption?

I posted this on Stack Overflow but someone told me I should post it here instead. I'm trying to use aes-128-cbc encryption with openssl, and I would expect that the key needs to be 32 digits. ...
0 votes
1 answer
444 views

Script for using AesCrypt on a lot of files

I'm just learning bash and I'm about to renew my backup security standards at home, just in case something happens. I have two external HDDs for Backup. I want to encrypt the files first on my laptop ...
1 vote
1 answer
2k views

Upgrading from loop-aes to cryptsetup

Once upon a time, I had an encrypted external disk that I would mount thus: # losetup -e AES128 /dev/loop1 /dev/sdb1 # fsck /dev/loop1 # mount /dev/loop1 /mnt/wd # ls /wd There are those that say ...
1 vote
0 answers
419 views

Enable AES encryption via ATA password on Samsung Evo 840 with data already on the drive?

Does the Evo 840 support changing the AES key (more or less) on the fly (in my case from "no key" to "my key")? I don't mind if it takes an hour to encipher the data as long as I don't have to re-...
8 votes
2 answers
9k views

Changing encryption settings for Microsoft Office 2010/2013

Although there are Office 2013 settings to change how encryption is performed, when you encrypt Open XML Format files (.docx, .xslx, .pptx, and so on) the default values — AES (Advanced Encryption ...
4 votes
1 answer
5k views

How to check AES speed on Ubuntu?

Is there any way to check how fast an Ubuntu 16.04 machine can do AES ciphering? I'm not interesting in comparing AES levels, but am just curious to see the cost quantified in some way. Since it's ...
2 votes
1 answer
1k views

OpenSSL AES speed different with EVP and no AES-NI

My computer does not have AES-NI, but when I run openssl speed with and without -evp I see a speed difference. Why is this? openssl speed aes-128-cbc Doing aes-128 cbc for 3s on 16 size blocks: ...
1 vote
1 answer
2k views

Basic AES decryption problem

I'm working through the book Cryptography Engineering, and the current problem goes something like this: Using an existing cryptography library, decrypt the following ciphertext (in hex form): ...
0 votes
0 answers
625 views

AES Encrypt DMG for Windows?

I need to encrypt a dmg file with an AES key. On MAC we can do so on Disk Utilities but how to do it on Windows? I tried Mac Tools Lite but it has no such function. I also tried Google Search but I ...
0 votes
1 answer
1k views

Decrypting the CipherValue in a PSKC file

This is the opposite of what I was doing in this question - https://crypto.stackexchange.com/questions/21021/encryption-and-hmac-in-a-pskc-file The spec is there at https://tools.ietf.org/rfc/rfc6030....
3 votes
2 answers
3k views

gpg2 - no option to select aes block cipher and outdated use agent?

With OpenSSL, I can select a what type of block cipher to use for encrypting a file. For example, if I want to encrypt a file with AES256 CBC block cipher mode: openssl aes-256-cbc -a -salt -pass ...
0 votes
0 answers
86 views

Question about AES and Cryptsetup

I've read that AES can work with three key sizes: 128 bits, 192 bits and 256 bits. I'm trying to set up a LUKS partition with CryptSetup, using “aes-xts-plain64” cipher. Why can I create keys of any ...