is there any research on detecting the encryption system or authentication mechanism over a cipher text?
assuming we have access to the key of a cipher text, we would like to apply the proper deciphering algorithm to access the plain text.
encryption system include , algorithm, length of the key and number of iterations required for algorithm.
I suppose that you have only the chance of trial and error for state-of-the-art cryptosystems. Ciphertext of a prudent cryptosystem should not be distinguishable from a stream of random binary digits.
No, especially those one are vulnerable with ciphertext repetitions.
There are many methods to distinguish encryption methods. For example, one method is to compare the PRNG period. The PRNG periods for your given algorithms (AES and RC4) are very long. For example, for RC4, the period is expected to be at least 10^100. However, storing and analysing such a massive amount of data is not feasible.
In addition to Günter's response, you may also find interesting answers to your question in the following links:
http://security.stackexchange.com/questions/32779/how-would-one-crack-a-weak-but-unknown-encryption-protocol
http://stackoverflow.com/questions/980720/most-effective-way-to-decrypt-data-when-encryption-method-is-unknown
http://crypto.stackexchange.com/questions/2184/what-is-the-prg-period-of-stream-ciphers-such-as-rc4-or-salsa20/2189#2189
Of course not all crypto systems are indistinguishable from random bits. Many crypto systems have been broken ...
But, indistinguishability is generally considered a security requirement. Even if indistinguishability is not directly necessary from the user point of view, the bias leading to distinguishability would likely also open up other vulnerabilties, to allow, for instance, key recovery attacks.
Who needs to classify insecure ciphers?
I actually thinking that a cryto inteligence system or software that can classify the crypto system and automatically decrypt the cipher text based is never been investigated which might be usefull for security system such as firewall or ids!
Yes such research could be helpful in decrypting malicious malware files where the crypto algos are not known priorly
Is any website that categorize the broken crypto system and the related cryptamalysis methods? It should exists at least for network security management!
To repeat: If you have a software that even only distinguishes a ciphertext from random, we consider the cryptosystem in use as broken.
In the designing of cryptographic systems, it must be designed that does not leave any mark or distinctive feature of the encrypted text generated by the system to difficult the cryptanalysis process. Because any distinctive feature is the weakness of the system. But there are some method that are used to diagnose some cryptographic systems.
You can try this method (link). We can identify packer files.
Article BinStat Tool for Recognition of Packed Executables
There is not available systematic method that can recognize the encryption algorithm of all type of ciphers texts. Since each cipher has a special characteristics. But there are test to find the randomness of cipher test such: Index coincidence, frequency test, run test, serial test, poker test.
Most cryptography books include tests of text randomness that help in analysis the cipher text.
If you need some books name, I will give you.
- Badges
- Science topic
- Similar topics
- Correction