Cryptography How "expensive" is crypto anyway? |
- How "expensive" is crypto anyway?
- Side channel analysis resistant AES Core Design
- Why PBKDF2 instead of a simple AES to derive a key from a password?
| How "expensive" is crypto anyway? Posted: 28 Dec 2017 11:50 AM PST |
| Side channel analysis resistant AES Core Design Posted: 28 Dec 2017 07:28 AM PST I am trying to design an AES crypto core on FPGA that is resistant to side channel analysis attacks. I will be using ECB and CBC modes. I see masking and using trng are popular methods. Is there any other way? What is the best and secure way when masking? Are they patented? There are lots of resource (thesis, papers) on the internet actually but I don't know exactly which one of those are suitable for me. Would you give me an advice? [link] [comments]  |
| Why PBKDF2 instead of a simple AES to derive a key from a password? Posted: 28 Dec 2017 08:59 AM PST I was reading about 1password and LastPass and they both use PBKDF2 as a KDF to derive an encryption key from the user's master password. I was wondering what are the advantages of PBKDF2 over a simple symmetric cipher, such as AES. We could use AES for this in a very simple way: we encrypt some arbitrary hardcoded data using the user's password (with some salt) as an encryption key. The ciphertext is the new encryption key to encrypt our actual data. We've derived a key from the master password. The only advantage of PBKDF2 I've found is that it is deliberately slow and AES is very fast. But since it is impossible to brute force AES anyway, how does this matter? If we suppose key size of 256 bits - there's no way we can brute force the password. The only thing that comes to my mind are dictionary attacks where having a slower algorithm is of course better. If we, hypothetically, suppose all passwords are equally random are there still any other advantages of PBKDF2? [link] [comments]  |
| You are subscribed to email updates from Cryptography news and discussions. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
| Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | |
No comments:
Post a Comment