KRYPTOG Logs
Roughly $10^{20}$ (a hundred quintillion) symmetric keys — an astronomically impractical number.
* At IoT scale, pairwise symmetric keys reach $\sim 10^{20}$ - impossible to manage. *
The calculation:
~30 billion ($3 \times 10^{10}$) smart devices connected by end of 2020
If "e...
Q What is a collision attack, and how does it differ from a pre-image attack?
A collision attack finds ANY two different messages with the same hash (attacker controls both), while a pre-image attack must match a specific given hash.
* The attacker crafts both messages; the birthday paradox cuts the work to $\sim 2^{n/2}$. *
Collision attack: Find $m_1 \n...
Q What security properties does a stream cipher provide, and what does it NOT provide?
Stream ciphers provide confidentiality only — they do NOT provide integrity or authenticity.
Provides:
Confidentiality — the plaintext is hidden from eavesdroppers
Does NOT provide:
Integrity — an attacker can flip bits in the ciphertext, and the corresponding plaintext bits w...
Q Why must you use separate keys for encryption and MAC, and what attack is possible if you don't?
Using the same key for encryption and MAC can lead to attacks where the attacker exploits the relationship between the two operations to forge messages or recover plaintext.
The deeper rule is domain separation: a key proven safe for one job carries no guarantee when reused for a...
Q How do you sign and verify a message with RSA, and why are signing and verifying mirror images of ea...
The signer raises the message to the secret exponent, $s = m^d \bmod N$; anyone verifies by raising the signature to the public exponent and checking $s^e \bmod N = m$. It is the same modular exponentiation run with opposite keys.
* Signing and verifying are the same exponentiat...
Q What is the birthday paradox, and how does it relate to collision attacks on hash functions?
With only 23 people in a room, there's a >50% chance two share a birthday — and with $\sqrt{n}$ elements, you expect a collision in a space of size $n$.
* The curve crosses 50% at 23 and ~90% at 40 — collisions appear far sooner than intuition expects. *
The math for birthdays:...
Q A 128-bit key is already unbreakable by brute force — so why do we bother with 256-bit keys like AES...
Because key length is not the security margin: real attacks shave the effective bit count. A time-memory tradeoff can need only about ⅔ of the bits, quantum search (Grover) halves them, and a conservative worst case is the cube root — 256/3 ≈ 85 bits is still hopeless, but 128/3...
Q How do quantum computers affect the security of block ciphers compared to asymmetric algorithms?
Quantum computers reduce block cipher brute-force from $2^n$ to $2^{n/2}$ (Grover's algorithm), which is serious but manageable — just double the key size. Asymmetric crypto is much harder hit.
* Effective security of AES-128 under each attack — the theoretical classical TMTO ($...
Q What is the zero-divisor problem in modular arithmetic, and why doesn't factoring work the same as w...
In modular arithmetic, $a \cdot b \equiv 0 \mod N$ does NOT mean that $a = 0$ or $b = 0$ — there can be "zero divisors," which is fundamentally different from real numbers.
For real numbers: $a \cdot b = 0 \Leftrightarrow a = 0$ or $b = 0$ (zero-product property)
For modular arit...
Q What is an algebraic group, and what four properties must it satisfy?
A group $\langle G, * \rangle$ is a set $G$ with an operation $*$ that satisfies closure, associativity, has a neutral element, and every element has an inverse.
The four group axioms:
Property
Requirement
Closure
$a * b \in G$ for all $a, b \in G$
Associativity
$a * (b...