AES hacking

AES hacking

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
AES hacking sokrAtes 11-28-2007
Posted by sokrAtes on November 28, 2007, 3:29 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I=B4m trying to get me into AES. I don=B4t know whether I understand it
right, but I think there is an input string and a key which is passed
to the encryption algorithm. Then I get back the encrypted string. To
decrypt it, I have to supply the key and the encrypted string.

Now, how do I find out the key if I have an input value, and an output
value (in fact, I can generate more and with any content)?
Are there tools or Ruby/Perl/Python/PHP snippets that let me do this?
Or, just give me some theoretical info.

Thanks!
sokrAtes

Posted by Sebastian G. on November 28, 2007, 4:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
sokrAtes wrote:


> Now, how do I find out the key if I have an input value, and an output
> value (in fact, I can generate more and with any content)?


Since AES is secure so far, your best chance to simply try all possible
keys. Since they're so many (2^keylength), this is infeasible.

> Are there tools or Ruby/Perl/Python/PHP snippets that let me do this?


Sure, it's trivial to write.

Posted by sokrAtes on November 30, 2007, 10:49 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Sure, it's trivial to write.

Can you point me to an adress where I can find information on how to
do it?
I=B4m not finding anything useful when searching with $searchengine$...


Posted by SafeBoot Simon on November 30, 2007, 12:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>
> > Sure, it's trivial to write.
>
> Can you point me to an adress where I can find information on how to
> do it?
> I=B4m not finding anything useful when searching with $searchengine$...

As Sebastian says, given the input and output, the only way to derive
the key is to try every single one, so what you need to do is
IMPLEMENT aes encryption, then try every key.

of course, it's going to take you until the end of the universe to do
that, so why bother starting?

S.

Posted by sokrAtes on November 30, 2007, 2:14 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> end of the universe

Now, what if the key is 10 chars long...
They would be 2^10 = 1024 possible keys, which is not really much to
try out.

Similar ThreadsPosted
help with ethical hacking January 31, 2005, 5:53 pm
HACKING TRUTH April 14, 2007, 9:11 am
Vista Hacking Challenge Answered August 8, 2006, 12:59 am
Security company attempts hacking December 3, 2006, 8:10 am
Ethical hacking tutorial notes January 23, 2008, 4:05 am

The site map in XML format XML site map

Contact Us | Privacy Policy