Fact-checked by Grok 2 weeks ago

Ciphertext

Ciphertext is data in its encrypted form, produced by applying a cryptographic algorithm to plaintext using a secret key, thereby concealing the original information from unauthorized access.^[1] This transformation, known as encryption, ensures that the data remains confidential and unintelligible without the corresponding decryption key.^[2] In cryptography, ciphertext is generated through various algorithms, including block ciphers, which process fixed-size blocks of plaintext (typically 64, 128, or 256 bits) to produce corresponding ciphertext blocks, and stream ciphers, which encrypt data sequentially, one bit or byte at a time, often using a keystream derived from the key.^[3] Block ciphers, such as the Advanced Encryption Standard (AES), are widely used for bulk data encryption due to their efficiency and security properties, while stream ciphers like RC4 (though deprecated in some contexts) are suited for real-time applications with limited resources.^[4] The choice between these types depends on factors like data volume, error tolerance, and computational constraints, with modes of operation (e.g., Cipher Block Chaining for block ciphers) further adapting them to specific needs.^[5] The concept of ciphertext has ancient origins, with early examples including the Spartan scytale (circa 400 BC), a transposition device that rearranged letters to form obscured messages, and the Caesar cipher (1st century BC), a substitution method shifting letters by a fixed number to create simple ciphertext.^[6] In modern cryptography, ciphertext plays a pivotal role in protecting digital communications, financial transactions, and stored data against eavesdropping and tampering, underpinning protocols like HTTPS and enabling secure systems used by billions daily.^[7] Security analyses, such as resistance to chosen-ciphertext attacks where adversaries attempt to exploit decryption oracles, are essential to validate the robustness of ciphertext generation.^[8]

Fundamentals

Definition and Core Concepts

Ciphertext is data that has been transformed from its original readable form, known as plaintext, through the application of an encryption algorithm and a secret key, rendering it unintelligible to unauthorized parties without the corresponding decryption process. This transformation ensures that the underlying information remains protected, as the ciphertext appears as random or garbled output that conveys no meaningful content on its own.^[9] In the fundamental model of symmetric encryption, this process is denoted mathematically as C = E(K, P), where C represents the ciphertext, E is the encryption function, K is the cryptographic key, and P is the input plaintext; decryption reverses this via P = D(K, C), using a corresponding decryption function D.^[9] By converting sensitive information into ciphertext, cryptography achieves confidentiality, safeguarding data against interception during transmission over insecure channels or while stored in vulnerable environments, thereby preventing eavesdroppers from accessing the original meaning.^[2] A straightforward illustration of ciphertext generation occurs in substitution ciphers, such as the Caesar cipher with a shift of one position, where the plaintext "HELLO" yields the ciphertext "IFMMP," each letter advanced alphabetically while preserving the message length.^[10]

Distinction from Plaintext

Plaintext refers to the original, unencrypted data in a readable and intelligible form, typically consisting of human-understandable information such as natural language text or structured data that can be directly processed without additional transformation.^[11] This contrasts sharply with ciphertext, which is the output of an encryption process and appears as a seemingly random sequence of symbols or bits devoid of inherent meaning or structure, rendering it incomprehensible to unauthorized observers.^[1] The primary distinction lies in readability and semantic content: plaintext retains its logical organization and contextual significance, allowing immediate interpretation, whereas ciphertext deliberately obscures these properties to protect the underlying information.^[2] The transformation from plaintext to ciphertext occurs through encryption, a reversible mathematical mapping that preserves the original data's integrity while concealing its content using a secret key.^[2] Formally, encryption applies a function E such that E(K, P) = C, where P is the plaintext, K is the key, and C is the ciphertext; decryption reverses this via the inverse operation D(K, C) = P.^[12] This process introduces two key principles—confusion and diffusion—to alter the plaintext's statistical properties and ensure security. Confusion complicates the relationship between the key and the resulting ciphertext, making it difficult to deduce the key from observed outputs, while diffusion spreads the influence of each plaintext bit across multiple ciphertext bits, eliminating patterns that could reveal the original structure.^[12] In the ideal case of perfect secrecy, the ciphertext provides no information whatsoever about the plaintext, meaning that even with unlimited computational power, an adversary cannot distinguish between possible plaintexts given the ciphertext alone.^[12] This notion, formalized by Claude Shannon, is achieved in systems like the one-time pad, where a truly random key of equal length to the plaintext is used exactly once, ensuring that every possible plaintext is equally likely for any observed ciphertext.^[12] Such perfect secrecy underscores the fundamental goal of encryption: to maintain the information's confidentiality without altering its recoverability for authorized parties.

Cipher Mechanisms Producing Ciphertext

Classical Cipher Techniques

Classical ciphers refer to manual encryption techniques developed before the computer era, primarily involving substitution and transposition methods to transform plaintext into ciphertext. Monoalphabetic substitution ciphers, such as the Atbash, replace each letter of the plaintext with a corresponding letter from a fixed substitution alphabet, preserving the relative frequencies of letters in natural languages. The Atbash cipher, one of the earliest known examples originating around 600 BCE among the Hebrews, simply reverses the alphabet, mapping A to Z, B to Y, and so on, without requiring a key.^[13] In contrast, polyalphabetic ciphers like the Vigenère use multiple substitution alphabets to obscure patterns, employing a tabula recta—a table of 26 shifted alphabets where each row shifts the previous one by one position—to facilitate encryption.^[14] Key generation in classical ciphers typically involves short keys, such as a numeric shift value or a keyword, which are repeated or applied sequentially to the plaintext. For substitution ciphers, a keyword might derive the substitution alphabet by listing its unique letters followed by the remaining alphabet, while in polyalphabetic systems like Vigenère, the keyword determines varying shifts for each plaintext letter. This application often results in ciphertext that retains detectable patterns; for instance, simple monoalphabetic substitutions maintain the frequency distribution of the original language, where common letters like E (appearing about 12.7% in English) remain prominent under the mapping. A representative example is the Caesar cipher, a monoalphabetic shift substitution attributed to Julius Caesar around 60 BCE, who reportedly used a shift of 3 positions for military dispatches. In this method, each plaintext letter is advanced by the key shift value modulo 26; for instance, A (position 0) becomes D (position 3), B becomes E, and so forth, producing ciphertext like "PB FDW KDV IOHDV" from the plaintext "MY CAT HAS FLEAS."^[15] Such uniform shifts lead to ciphertext exhibiting uniform biases, such as elevated frequencies for shifted common letters, making it straightforward to identify the key through trial of the 25 possible shifts.^[15] Historically, classical ciphers trace back to ancient civilizations, with the scytale—a transposition device used by Spartans in the 5th century BCE—representing one of the earliest tools, where a leather strip wrapped around a baton of fixed diameter allowed messages to be written and then unwound into jumbled ciphertext, requiring an identical baton for decryption.^[16] These methods evolved for military and diplomatic purposes through the Renaissance and into the early 20th century, seeing use up to World War I in systems like the Playfair cipher for battlefield communications.^[17] However, their manual nature imposed significant scalability limitations, as encryption and decryption relied on human labor and time-intensive processes, rendering them inefficient for high-volume or rapid wartime exchanges.^[17] Ciphertext produced by classical methods often retains linguistic statistics from the plaintext, such as letter frequencies and digram patterns, which persist in monoalphabetic substitutions and even partially in polyalphabetics with short keys. This preservation makes such ciphertext vulnerable to frequency analysis, where analysts compare ciphertext letter distributions to known language profiles to infer mappings or keys, as demonstrated in breaking the Caesar cipher by identifying the most frequent letter's shift.

Contemporary Cipher Algorithms

Contemporary cipher algorithms are designed for digital systems, emphasizing computational efficiency, scalability, and resistance to modern cryptanalytic attacks, producing ciphertext through pseudorandom transformations of plaintext. Block ciphers, a cornerstone of these algorithms, operate on fixed-size data blocks, typically encrypting them in a manner that obscures patterns in the output ciphertext. The Advanced Encryption Standard (AES), standardized by the National Institute of Standards and Technology (NIST) in 2001 as FIPS 197, exemplifies this approach; it processes 128-bit blocks using keys of 128, 192, or 256 bits, with modes such as Cipher Block Chaining (CBC) chaining blocks to produce variable-length ciphertext while enhancing diffusion. AES's adoption stems from its selection through a rigorous public competition, where the Rijndael algorithm demonstrated superior security and performance across hardware and software implementations.^[18] Stream ciphers, in contrast, generate a continuous keystream that is combined with plaintext—often via bitwise XOR—to yield ciphertext suitable for real-time applications like network communications. RC4, a widely used stream cipher until the mid-2010s, was deprecated due to vulnerabilities exposed in analyses showing biases in its keystream output, leading to recommendations against its use in protocols like TLS by 2015.^[19] Its successors, such as ChaCha20, address these flaws by employing a more robust permutation-based design, producing a 256-bit keystream from a 256-bit key and nonce, as specified in RFC 7539 for IETF protocols. ChaCha20's efficiency on resource-constrained devices and integration with authenticators like Poly1305 have made it a preferred choice for authenticated encryption in modern systems.^[20] Public-key cryptosystems introduce asymmetry, where encryption uses a public key to produce ciphertext that only the private key holder can decrypt, facilitating secure key distribution without prior shared secrets. The RSA algorithm, introduced in 1977 by Rivest, Shamir, and Adleman, achieves this through modular exponentiation: ciphertext C is computed as C = P^e \mod n, where P is the plaintext, e is the public exponent, and n is the product of two large primes. This method's security relies on the difficulty of integer factorization, supporting key sizes up to 4096 bits for contemporary use. Hybrid approaches combine these paradigms for practicality, employing public-key methods like RSA for initial key exchange to establish a symmetric key, which then encrypts bulk data via efficient algorithms such as AES, as seen in protocols like TLS.^[21] Current standards underscore the evolution toward quantum-resistant designs amid advancing computational threats. NIST continues to endorse AES-256 for symmetric encryption in 2025-era applications, citing its adequacy against classical and near-term quantum attacks when paired with sufficient key lengths. For post-quantum security, NIST standardized CRYSTALS-Kyber in 2024 as FIPS 203 (renamed ML-KEM), a lattice-based key encapsulation mechanism that generates shared secrets encapsulated in ciphertext resistant to quantum algorithms like Shor's, ensuring long-term protection for hybrid systems. In March 2025, NIST selected additional algorithms, including the code-based HQC, for further standardization to expand post-quantum options.^[22]^[18]

Security Analysis of Ciphertext

In a known-plaintext attack (KPA), the cryptanalyst possesses pairs of plaintext and corresponding ciphertext, enabling the deduction of the encryption key or recovery of additional plaintexts. This attack model assumes the adversary can exploit predictable or recoverable plaintext, such as standard message headers or repeated phrases in communications. The objective is to analyze these pairs to reverse-engineer the cipher's parameters, often through linear equations or statistical correlations specific to the algorithm. A prominent historical application of KPA occurred during World War II against the German Enigma machine, where Allied cryptanalysts at Bletchley Park used "cribs"—known plaintext segments like weather reports or salutations—to align with intercepted ciphertexts and narrow down rotor settings and daily keys. This technique, combined with electromechanical devices like the Bombe, facilitated daily key recovery and contributed significantly to Allied intelligence successes. Early computational efforts, like those on Enigma, further highlighted KPAs' impact by integrating mechanical aids to process known plaintext efficiently.^[23]^[24] Related-key attacks target block ciphers by observing encryptions under multiple keys that differ in predictable ways, such as fixed differences in specific bits, to reveal internal weaknesses like poor diffusion. These attacks often build on differential cryptanalysis, where the propagation of input differences through rounds is analyzed to distinguish the cipher from a random permutation. For instance, related-key differential attacks on DES variants have demonstrated vulnerabilities by exploiting key schedule similarities, allowing key recovery with reduced computational effort compared to exhaustive search.^[25]^[26] The effectiveness of known-plaintext and related attacks is quantified by key recovery probability, with the advantage defined as

\Delta = \Pr[\text{success}] - \frac{1}{|K|}

where |K| denotes the key space size; a non-negligible \Delta indicates a practical vulnerability, as random guessing yields \frac{1}{|K|}. This metric underscores the need for ciphers to maintain security even under partial plaintext exposure.^[27]

Ciphertext-Only and Chosen-Text Attacks

Chosen-plaintext attacks (CPA) empower the adversary to select arbitrary plaintexts and obtain their ciphertexts, typically via access to an encryption oracle, to probe for patterns or biases in the cipher's output. This model tests the cipher's resistance to adaptive queries and is foundational for security notions like indistinguishability under CPA. In cryptanalysis, a ciphertext-only attack (COA) assumes the adversary has access solely to a collection of ciphertext without any corresponding plaintext or additional context, relying on inherent patterns or biases within the ciphertext to deduce the underlying message or key.^[28] This attack model is foundational in evaluating the security of encryption schemes, as it represents the minimal information an eavesdropper might obtain from intercepted communications. For instance, in classical monoalphabetic substitution ciphers, frequency analysis exploits the non-uniform distribution of letters in natural language; the most frequent ciphertext symbol often corresponds to 'E' in English plaintext, allowing gradual reconstruction of the substitution mapping with sufficient ciphertext volume. These attacks played a pivotal role in breaking classical ciphers, such as the Vigenère polyalphabetic cipher through Kasiski's 1863 examination method, which identified repeated sequences in ciphertext to infer key length and enable subsequent key deduction, marking a shift toward systematic cryptanalysis in the pre-computer era.^[29] A chosen-ciphertext attack (CCA) extends the threat model by granting the attacker the ability to submit specially crafted ciphertexts to a decryption oracle, observing the outputs to gain insights into the system's behavior and potentially decrypt target ciphertexts. This is particularly dangerous in public-key systems where partial decryption information can reveal key material or message contents. A seminal example is Bleichenbacher's 1998 attack on the RSA encryption standard with PKCS#1 v1.5 padding, where the attacker queries an oracle with modified ciphertexts to exploit malleability in the padding scheme, enabling decryption of arbitrary messages using roughly 20,000 oracle calls despite the oracle rejecting invalid inputs. Another example is the padding oracle attack on CBC mode, where an attacker exploits decryption-side information about padding validity to iteratively recover plaintext byte-by-byte, as demonstrated against PKCS#7 padding in symmetric block ciphers.^[30]^[31] CCA variants distinguish between non-adaptive (CCA1) and adaptive (CCA2) scenarios to model escalating adversary capabilities. In CCA1, the attacker makes all chosen-ciphertext queries before receiving the target ciphertext, limiting interactions to a single phase.^[32] Conversely, CCA2 permits adaptive queries, where the attacker can refine subsequent submissions based on prior oracle responses, even after observing the challenge ciphertext, providing a stronger security notion that modern schemes must withstand.^[32] These definitions, formalized by Bellare and Rogaway, underscore the need for encryption to remain indistinguishable under such dynamic probing.^[32] In contemporary contexts, COAs remain relevant against stream ciphers through detection of statistical biases in the keystream. For example, the 2001 Fluhrer-Mantin-Shamir (FMS) attack on the RC4-based Wired Equivalent Privacy (WEP) protocol in 802.11 networks exploits initialization vector biases, allowing key recovery from as few as 40,000 captured packets by analyzing second-byte correlations in the ciphertext.^[33] Similarly, CCAs pose ongoing risks to hybrid encryption systems in the post-quantum era, where combining classical and lattice-based key encapsulation mechanisms must preserve CCA2 security; recent analyses show that improper integration can enable oracle attacks that undermine quantum resistance, as demonstrated in 2022 constructions requiring explicit rejection sampling to mitigate decryption leakage.^[34] Security against these attacks is often evaluated using entropy measures, which quantify the randomness of ciphertext distributions. Ideal perfect secrecy requires the entropy of the ciphertext H(C) to approximate \log_2 |\mathcal{A}|, where \mathcal{A} is the ciphertext alphabet size, ensuring no discernible patterns; deviations, such as reduced conditional entropy H(C|M), signal vulnerabilities exploitable by COAs or CCAs. This framework, rooted in Shannon's information theory, guides the design of secure ciphers by prioritizing uniform output distributions.

Historical and Notable Instances

Unsolved Ciphertexts

The Voynich Manuscript, dating to the early 15th century, is a 240-page illustrated codex written in an unknown script known as Voynichese, featuring drawings of unidentified plants, astronomical diagrams, and biological scenes that suggest it may be a herbal, astrological text, or possibly a hoax.^[35] Despite extensive analyses using cryptographic, linguistic, and forensic methods, the script remains undeciphered, with no consensus on its language or purpose.^[35] Recent machine learning efforts, including neural network models applied in 2024, have failed to produce a verifiable translation, reinforcing its status as an enduring enigma up to 2025.^[36] The Zodiac Killer's ciphers from the late 1960s and 1970s include several unsolved instances linked to murders in the San Francisco Bay Area, notably the Z13 (a 13-symbol message sent in April 1970) and Z32 (a 32-symbol cipher with an accompanying map sent in June 1970).^[37] These are believed to use homophonic substitution similar to the solved Z408 and Z340 ciphers, potentially revealing the killer's identity or bomb location, but they resist decryption due to their brevity and lack of context.^[37] As of 2025, Z13 and Z32 remain unbroken despite computational attempts, maintaining their connection to the unidentified serial killer responsible for at least five 1969 murders.^[38] In the 1948 Tamam Shud case, also known as the Somerton Man mystery, a five-line ciphertext consisting of jumbled letters (WRGOABABD / MLIAOI [struck through] / WTBIMPANETP / MLIABOAIAQC / ITTMTSAMSTGAB) was found indented on a page of a Persian poetry book linked to an unidentified man's body on an Adelaide beach.^[39]^[40] The code, discovered in 1948 alongside the scrap reading "Tamam Shud" (meaning "it is ended"), is hypothesized to be a book cipher, microcode, or acronym-based message, possibly related to espionage or personal notes, but all decryption efforts have failed.^[39] Although the man's identity was established as Carl Webb in 2022 via DNA, the ciphertext persists as unsolved in 2025.^[41] These unsolved ciphertexts share common challenges, including the absence of keys, contextual clues, or bilingual texts, which thwart both classical and modern approaches.^[35] Machine learning applications, such as those tested on the Voynich Manuscript in 2024, often yield ambiguous patterns without meaningful plaintext, highlighting limitations in handling low-frequency symbols and potential artificial languages.^[42]

Deciphered Famous Examples

One of the most renowned examples of deciphered ciphertext is the Enigma machine's output during World War II, where German military communications, including U-boat orders, were encrypted using rotor-based substitution mechanisms that permuted letters through multiple rotating wheels and plugboards.^[43] British cryptanalysts at Bletchley Park, led by Alan Turing, developed the electromechanical Bombe machine in the early 1940s to exploit known weaknesses in Enigma's daily settings and cribs—predicted message patterns—to systematically test rotor configurations and recover plaintext, enabling the Allies to intercept and act on vital intelligence that shortened the war.^[44] This breakthrough revealed operational details like U-boat positions in the Atlantic, contributing to the defeat of the German submarine fleet by mid-1943.^[45] The Beale ciphers, originating in the 1820s, consist of three numerical ciphertexts purportedly describing a buried treasure of gold, silver, and jewels in Virginia; only the second was deciphered in the late 19th century as a book cipher keyed to a numbered version of the Declaration of Independence, where each number corresponds to the first letter of the respective word in the document, yielding an inventory of the treasure's contents valued at over $60 million in modern terms.^[46] The method involved trial-and-error matching of the ciphertext numbers to potential key texts until the Declaration produced coherent English, though the first and third ciphers—intended to reveal the location and beneficiaries—remain unsolved despite extensive analysis.^[47] In 17th-century French diplomacy, Cardinal Richelieu employed a grille-based omission cipher, where a perforated template (Cardan grille) was placed over blank paper to dictate positions for writing the secret message, after which the grille was rotated and the remaining spaces filled with innocuous text to conceal the pattern.^[48] These ciphertexts were solved through pattern recognition by aligning candidate grilles to isolate non-random letter placements amid the filler text, a technique attributed to Richelieu's cryptologic advisor Antoine Rossignol, who broke similar diplomatic codes for Louis XIII.^[49] The Dorabella cipher, a 1897 ciphertext of 87 symbols sent by composer Edward Elgar to Dora Penny, consists of arcs and loops potentially representing a substitution scheme; a 2017 proposal interpreted it as musical notation mapping symbols to notes, producing a melodic sequence akin to Elgar's style, though this remains one of several unverified decodings amid ongoing debate.^[50] A more recent decipherment is the Zodiac Killer's Z340 ciphertext, a 340-character homophonic substitution cipher sent in 1969, solved in December 2020 by a team using computational tools to hypothesize diagonal reading paths and score candidate substitutions based on English n-gram frequencies and readability metrics, revealing a taunting message about the killer's motives and slavery in the afterlife.^[51] These decipherments highlight cryptanalysis advancements, such as the Enigma break fostering early computing via Turing's theoretical and practical innovations in automated search algorithms, influencing modern digital computers and AI-driven codebreaking.^[52] Similarly, the Z340 solution demonstrates computational scoring's efficacy in tackling complex historical ciphers, bridging classical methods with contemporary software for high-impact recoveries.^[53]

References

[1]
ciphertext - Glossary | CSRC
Ciphertext is data in its encrypted form, also known as encrypted data or the encrypted form of the plaintext.
[2]
encryption - Glossary | CSRC
Cryptographic transformation of data (called “plaintext”) into a form (called “ciphertext”) that conceals the data's original meaning to prevent it from being ...
[3]
[PDF] An Overview of Cryptography - cs.Princeton
In general, the same plaintext block will always encrypt to the same ciphertext when using the same key in a block cipher whereas the same plaintext will ...
[4]
[PDF] Elementary Cryptography - UT Computer Science
Feb 25, 2020 · The original form of a message is called plaintext and the encrypted form called ciphertext. CS361 Slideset 5: 11. Cryptography I. More ...<|control11|><|separator|>
[5]
[PDF] Notes 3/1
The unencrypted message M is sometimes known as the plaintext, and its encryption is sometimes called the ciphertext. Let us now examine the threat model ...
[6]
Historical Ciphers - Computer Science
Apr 25, 2010 · The first encrypted messages were developed in ancient Egypt as series of disordered hieroglyphics. This means of encryption was very simple, utilizing a ...
[7]
[PDF] Principles of Modern Cryptography
Aug 17, 2015 · Cryptography is an indispensable tool used to protect information in computing systems. It is used everywhere and by billions of people ...
[8]
https://csrc.nist.gov/glossary/term/chosen_ciphertext_attack
[9]
https://cacr.uwaterloo.ca/hac/about/chap1.pdf
[10]
Couched in Unintelligibility: Agonies of The Times - Library Matters
Feb 28, 2022 · Throughout the 19th century, ciphers and codes were a covert means ... Cipher-text was first decrypted into the numeric code outlined by Palmer.
[11]
The History of Cryptography - DigiCert
Dec 29, 2022 · The word cryptography comes from the Greek words kryptos, meaning hidden, and graphien, meaning to write. This “hidden writing” has been ...
[12]
plaintext - Glossary - NIST Computer Security Resource Center
Definitions: Unencrypted information that may be input to an encryption operation. Note: Plain text is not a synonym for clear text. See clear text.Missing: 800-12 | Show results with:800-12
[13]
[PDF] Communication Theory of Secrecy Systems - cs.wisc.edu
Shannon, "Communication T heory of Secrecy Systems", Bell System T echnical. Journal, vol.28-4, page656--715, Oct. 1949. Page 2. symbols in accordance with ...Missing: URL | Show results with:URL
[14]
Classical Ciphers
### Key Generation and Application in Classical Substitution Ciphers
[15]
Vigenère Cipher - Crypto Museum
Aug 14, 2010 · The Vigenère Cipher exists in different forms, such as a rectangular matrix with 26 shifted alphabets (tabula recta) and as two concentric discs ...
[16]
3 The Caesar Cipher and Modular Arithmetic
Julius Caesar is reported to have used such a cipher with a shift of 3 for his military communications. The correspondence between plaintext and ciphertext is ...
[17]
Ancient Cybersecurity? Deciphering the Spartan Scytale – Antigone
Jun 27, 2021 · The Spartan scytale was a stick used to wrap a parchment strip, which was then unwrapped to transpose letters, requiring a matching scytale to ...
[18]
[PDF] An Overview of Cryptography
Jun 30, 2010 · With secret key cryptography, a single key is used for both encryption and decryption. As shown in Figure 1A, the sender uses the key (or some ...
[19]
[PDF] FIPS 197, Advanced Encryption Standard (AES)
Nov 26, 2001 · The AES algorithm is a symmetric block cipher that can encrypt (encipher) and decrypt (decipher) information.
[20]
RFC 7465 - Prohibiting RC4 Cipher Suites - IETF Datatracker
This document requires that Transport Layer Security (TLS) clients and servers never negotiate the use of RC4 cipher suites when they establish connections.Missing: deprecated | Show results with:deprecated
[21]
RFC 7539 - ChaCha20 and Poly1305 for IETF Protocols
This document defines the ChaCha20 stream cipher as well as the use of the Poly1305 authenticator, both as stand-alone algorithms and as a combined mode.
[22]
[PDF] A Method for Obtaining Digital Signatures and Public-Key ...
A public-key cryptosystem can be used to “bootstrap” into a standard encryption scheme such as the NBS method. Once secure communications have been established,.
[23]
NIST Post-Quantum Cryptography Standardization
FIPS 203, FIPS 204 and FIPS 205, which specify algorithms derived from CRYSTALS-Dilithium, CRYSTALS-KYBER and SPHINCS+, were published August 13, 2024.Round 3 Submissions · Call for Proposals · Round 1 Submissions
[24]
A Java Based Attack on UNIX Password Files
It was in fact Alan Turing who finalized the attack on the Enigma; however the attack was still reliant on a crib, or section of known plaintext in the ...<|control11|><|separator|>
[25]
[PDF] The Enigma Machine
Feb 3, 2016 · The first challenge in implementing the known-plaintext attack consists of figuring out ... Assuming that the offset is correct, the Enigma ...
[26]
[PDF] Cryptanalytic attacks on DES block cipher
Aug 16, 2016 · Related Key attacks Related-Key attack is any form of cryptanalysis which the attacker can observe the operation of a cipher under several ...
[27]
[PDF] On Resistance of DES to Related-Key Differential Cryptanalysis
The algorithm is a block cipher that uses 64-bit blocks and a 64-bit key, but eight of the key bits are used for parity checking. Therefore, the actual key ...
[28]
[PDF] Lecture 5 - CPSC 467: Cryptography and Security
Sep 15, 2020 · A known plaintext attack assumes the attacker has prior knowledge of some plaintext-ciphertext pairs (m1,c1),(m2,c2),.... The Hill cipher ...
[29]
[PDF] Authenticated and Misuse-Resistant Encryption of Key-Dependent ...
In order to have a polynomial time attack where the key-recovery probability is, say, a constant, ... i, and thus that the adversary gets a constant advantage in ...
[30]
Cryptography attacks: The ABCs of ciphertext exploits - TechTarget
Aug 24, 2017 · This section from Domain 3 offers a comprehensive overview of the various methods attackers use to crack ciphertext and otherwise exploit cryptography systems.Missing: seminal | Show results with:seminal
[31]
W4261 Introduction to Cryptography: Spring 2022 Lecture Summaries
Definition of EAV-security (indistinguishability in the presense of an eavesdropper--single ciphertext only attack). Noted that if we remove the restriction ...
[32]
[PDF] Relations Among Notions of Security for Public-Key Encryption ...
in an adaptive chosen-ciphertext attack (CCA2) we continue to give 1 (the public key and) access to a decryption oracle, but also give 2 access to the same ...
[33]
[PDF] Chosen Ciphertext Attacks against Protocols Based on the RSA ...
In this paper, we describe a different algorithm that has as its goal to minimize the number of chosen ciphertexts; thus, we show the practicality of the attack ...
[34]
[PDF] Using the Fluhrer, Mantin, and Shamir Attack to Break WEP
We implemented an attack against WEP, the link-layer security protocol for 802.11 networks. The attack was described in a recent paper by Fluhrer, Mantin, ...
[35]
[PDF] Towards Leakage-Resistant Post-Quantum CCA-Secure Public Key
In this section, our hybrid encryption scheme builds on a KEM with explicit rejection (in the terminology of [48,67]), meaning that invalid encapsulations are ...
[36]
Voynich Manuscript - Beinecke Rare Book & Manuscript Library
Written in an unknown script by an unknown author, the manuscript has no clearer purpose now than when it was rediscovered in 1912 by rare books dealer Wilfrid ...
[37]
Artificial Intelligence Takes a Crack at Decoding the Mysterious ...
Jan 31, 2018 · Artificial Intelligence Takes a Crack at Decoding the Mysterious Voynich Manuscript. But medieval scholars are skeptical about this latest ...
[38]
The New Cryptographers | Virginia Tech News
Apr 21, 2021 · There are still two unsolved ciphers that were sent by the Zodiac in April and June 1970: Z13 and Z32. And there are new things that can be ...
[39]
Zodiac Killer Z32 - Cipher Mysteries
Leviathan on September 4, 2025 at 1:01 am said: For over fifty years, the Z32 cipher and map puzzle has remained one of the Zodiac Killer's unsolved taunts.
[40]
The six clues that have failed to solve the Somerton Man mystery
May 18, 2021 · 'Tamam Shud' and the five other clues that have failed to solve the Somerton Man mystery · A black and white image of a deceased man · The ...Missing: unsolved | Show results with:unsolved
[41]
Somerton Man Charles Webb's true identity revealed in family ...
Charles Webb.
[42]
An Intoxicating 500-Year-Old Mystery - The Atlantic
Aug 8, 2024 · The Voynich Manuscript has long baffled scholars—and attracted cranks and conspiracy theorists. Now a prominent medievalist is taking a new ...
[43]
The Enigma of Alan Turing - CIA
Apr 10, 2015 · ENIGMA was a cipher machine—each keystroke replaced a character in the message with another character determined by the machine's rotor settings ...
[44]
[PDF] Solving the Enigma: History of Cryptanalytic Bombe
In December 1941, before the change had been made official, a U-boat sent a message using the four-rotor machine.To compound the mistake, the same message was ...
[45]
How Alan Turing Cracked The Enigma Code | Imperial War Museums
With the help of captured Enigma material, and Turing's work in developing a technique he called 'Banburismus', the naval Enigma messages were able to be read ...
[46]
The Quest to Break America's Most Mysterious Code—And Find $60 ...
Apr 25, 2025 · A set of 200-year-old ciphers may reveal the location of millions of dollars' worth of gold, silver, and jewels buried in rural Virginia.
[47]
[PDF] BE f\L E PA' D~QS - National Security Agency
substituticn cipher--variable-key system, or pseudo code;. and even though one were .told.that the Declaration of Independence was the key, unless it was ...
[48]
[PDF] CRYPTANALYSIS a study of ciphers and their solution - Informatika
The Richelieu grille, of approximately the same size and shape as the paper used for correspondence, could be laid over a sheet of paper so as to reveal.<|separator|>
[49]
French Ciphers during the Reign of Louis XIII - Cryptiana
Louis XIII's reign saw the appearance of a skilled codebreaker, Antoine Rossignol (1600-1682), who was recruited by Richelieu in 1628 and quickly established ...Missing: grid omission recognition
[50]
Elgar's Cipher Letter to Dorabella (MT 1970) - Eric Sams
Elgar's pattern of one, two or three arcs at eight possible angles implies a system of 3 x 8 = 24 symbols and hence a simple substitution cipher (ironic ...<|separator|>
[51]
[PDF] The Solution of the Zodiac Killer's 340-Character Cipher - arXiv
Mar 26, 2024 · In 2020 Jonathan Block created an interactive web-based solver [119] that lets users supply sub- stitutions for cipher symbols to produce ...
[52]
Alan Turing's Everlasting Contributions to Computing, AI and ...
Jun 23, 2022 · This work broke the German Enigma machine encryption, making a significant contribution to the war effort.Missing: cryptanalysis | Show results with:cryptanalysis
[53]
The Solution of the Zodiac Killer's 340-Character Cipher—Wolfram ...
Mar 24, 2021 · In these letters, the killer took responsibility for the crimes and threatened to commit further murders. He also included three ciphers, each ...Missing: scoring | Show results with:scoring