Questions about this topic? Sign up to ask in the talk tab.

Difference between revisions of "List of cryptography functions"

From NetSec
Jump to: navigation, search
Line 32: Line 32:
 
| Electronic Code Book||ECB||No||Yes||Yes||Yes||Same plaintext yields same ciphertext.
 
| Electronic Code Book||ECB||No||Yes||Yes||Yes||Same plaintext yields same ciphertext.
 
|-
 
|-
| Cipher Block Chaining||CBC||Yes (must use separate authentication)||No||Yes||Yes||
+
| Cipher Feedback||CFB||Yes (with authentication)||No||Yes||Yes||
 
|-
 
|-
| Cipher Feedback||CFB||Yes (must use separate authentication)||No||Yes||Yes||
+
| Output Feedback||OFB||Yes (with authentication)||No||No||No||
 
|-
 
|-
| Output Feedback||OFB||Yes (must use separate authentication)||No||No||No||
+
| Cipher Block Chaining||CBC||Yes (with authentication)||No||Yes||Yes||
 
|-
 
|-
| Cipher Block Chaining||CBC||Yes (must use separate authentication)||No||Yes||Yes||
+
| Counter||CTR||Yes (with authentication)||Yes||Yes||Yes||
 
|-
 
|-
| Counter||CTR||Yes (must use separate authentication)||Yes||Yes||Yes||
+
| Galois Counter Mode||GCM||Recommended||Yes||Yes||No||Counter mode plus authentication, very efficient.
|-
+
| Galois Counter Mode||GCM||Recommended wherever possible||Yes||Yes||No||Counter mode plus authentication, very efficient.
+
 
|-
 
|-
 
|}
 
|}

Revision as of 18:51, 18 October 2015

Encryption Quick Reference
Name Value
Recommended public key algorithms Curve25519, Ed25519, ECDSA, RSA
Recommended symmetric ciphers Salsa20, ChaCha20, AES
Recommended minimum key size (symmetric) 128 bits
Preferred minimum key size (symmetric) 256 bits
Recommended minimum key size (RSA) 2048 bits
Preferred minimum key size (RSA) 4096 bits


Encryption Modes
Mode AKA Should use? Encryption parallelizable? Decryption parallelizable? Random read? Notes
Electronic Code Book ECB No Yes Yes Yes Same plaintext yields same ciphertext.
Cipher Feedback CFB Yes (with authentication) No Yes Yes
Output Feedback OFB Yes (with authentication) No No No
Cipher Block Chaining CBC Yes (with authentication) No Yes Yes
Counter CTR Yes (with authentication) Yes Yes Yes
Galois Counter Mode GCM Recommended Yes Yes No Counter mode plus authentication, very efficient.


Symmetric Ciphers
Cipher Block size (bits) Key size (bits) Stream? Should use? Estimated Time to Crack Notes
AES 128 128,192,256 Yes
DES 64 56 No In 2008 their COPACOBANA RIVYERA reduced the time to break DES to less than one day, using 128 Spartan-3 5000's.
3DES 64 168,112,56 No
Blowfish 64 32-448 Not ideal This is the primary mode of encryption used in IRC encryption plugins.


Hash functions
Hash Bits Broken? Should use? Notes
MD5 128 Yes No Collisions can be generated at will with desktop computational power.
SHA-1 160 Yes No Collision are expensive to generate, but a sufficiently motivated adversary can do it.
SHA-2 224-512 No Yes Pseudo-collisions generated with partial SHA-256, no full attacks.
SHA-3 (Keccak) 224-512 No Yes Not widely implemented yet.