Please enable JavaScript.

Coggle requires JavaScript to display documents.

Cryptography - Coggle Diagram

- - - - 3DES
        
        Can implement also normal DES
        
        Two/three different 56-bit keys
        
        56/112 bit strength (2 keys)
        
        112 bits strength (3 keys)
        
        EDE mode
      - Efficient in hardware
      - 56-bit key + 8 bits
        
        64-bit block
      - Meet-in-the-middle attack
    - - - 128-/192-/256-bit key
        
        - 128-bit block
    - - 128-bit key
        
        64-bit block
      - XOR
        
        Addition mod 16
        
        Multiplication mod (2^16 + 1)
    - - Variable key size (8-1024 bits)
        
        64-bit block
    - - CBC
        
        IV
        
        In clear
        
        Encrypted with ECB
        
        No parallelization
      - ECB
        
        Identical blocks generate identical plaintext
        
        Vulnerable to known-plaintext
      - Padding
        
        Alternatives
        
        CTS
        
        Swapping last and second-to-last blocks
        
        CFB/OFB
        
        CTR
        
        Useful for plaintexts smaller than one block
        
        Nonce and counter
        
        Decryption of random blocks possible
        
        Vulnerable to cancellation attacks
        
        Null bytes
        
        0x80 followed by 0x00 ...
        
        Explicit length
        
        Null bytes
        
        Bytes with value equal to padding length
        
        Random bytes
        
        Progressive number
        
        Padding length minus 1
    - - Camellia
      - SEED/ARIA
      - GOST/Kuznyechik
  - - - Key exchange algorithms
      - Out-Of-Band
  - - - Key generator
      - Seed
      - Key generator algorithm
    - - 128-/256-bit key
      - f(Key256,Nonce64,Counter64) = 512-bit keystream block
      - IETF specs:
        
        96-bit nonce
        
        32-bit counter
- - - - Secret key
      - Public key
  - - - Product of two prime numbers and factorization of result
      - Digital signature
      - Confidentiality without shared secrets
    - - Digital signature
      - Power given base and exponent
    - - Addition of two points and multiplication by a scalar
      - ECDSA
        
        ECDH
        
        ECMQV
        
        ECIES
    - - Secret key exchange for symmetric algorithms
      - Vulnerable to MitM
        
        Neutralized with MQV (authenticated DH)
    - - Out-of-band
      - Public key certificate
- - - - MD2, MD4, MD5 (128-bit)
      - SHA1 (160-bit)
      - SHA2
        
        SHA-224
        
        SHA-256
        
        SHA-384
        
        SHA-512
      - SHA3
      - Security equal to N/2, where N is the digest length
      - Key Derivation Function
        
        - Password
        
        - Salt
        
        - Iterations
        
        PBKDF2
        
        DK = PBKDF2(PRF,PWD,Salt,C,dkLen)
        
        PRF = Pseudorandom function of two parameters
        
        PWD = password
        
        Salt
        
        C = desired number of iterations
        
        dkLen = length of derived key
        
        HKDF
    - - HMAC
      - CBC-MAC