Scribd
Upload
68 views

128-Ecb, Etc. You Can Find The Meaning of The Command-Line Options and All The

This document provides instructions for students to complete tasks exploring encryption algorithms and modes using OpenSSL. The tasks include encrypting and decrypting files using AES in ECB and CBC modes, verifying digital signatures to detect file modifications, and conducting a known-plaintext attack to determine the encryption key.

Uploaded by

ebook self
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
68 views

128-Ecb, Etc. You Can Find The Meaning of The Command-Line Options and All The

This document provides instructions for students to complete tasks exploring encryption algorithms and modes using OpenSSL. The tasks include encrypting and decrypting files using AES in ECB and CBC modes, verifying digital signatures to detect file modifications, and conducting a known-plaintext attack to determine the encryption key.

Uploaded by

ebook self
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 3

Jordan University of Science and Technology

Network Engineering and Security Department

NETWORK SECURITY LABORATORY NES553

Encryption Algorithms and Modes

_____________________________________________________

In this task, we will use various encryption algorithms and modes. You can use the
following openssl enc command to encrypt/decrypt a file. To see the manuals, you can
type man openssl and man enc.

Please replace the ciphertype with a specific cipher type, such as -aes-128-cbc, -aes-
128-ecb, etc. You can find the meaning of the command-line options and all the
supported cipher types by typing "man enc".

We include some common options for the openssl enc command in the following:

Using PSCP command : the PuTTY Secure Copy client, is a tool for transferring files
securely between computers using an SSH connection.(use this command from
windows)

pscp source [user@]host:destenation


example:
pscp C:\Users\ram\Desktop\test.txt [email protected]:/home/justcbuser/test.txt
Task 1: Encryption Mode — Corrupted Cipher Text

To understand the properties of various encryption modes, we would like to do the


following exercise:

1. Download the file plain.txt from E-learning .


2. Upload it to your node using pscp.
3. Encrypt the file using the AES-128 ECB mode.
4. Unfortunately, a single bit of the 30th byte in the encrypted file got corrupted.
You can achieve this corruption using shed, modifying the 30th byte in this
file.
5. Decrypt the corrupted file using the correct key.
6. Encrypt the original file plain.txt using the AES-128 CBC mode.
7. Unfortunately, a single bit of the 30th byte in the encrypted file got corrupted.
You can achieve this corruption using shed, modifying the 30th byte in this
file.
8. Decrypt the corrupted file using the correct key and initialization vector (IV).
Answer the following questions:
1. How much information can you recover by decrypting the corrupted file, if
the encryption mode is
ECB:
CBC:

Task 2: Signatures.

1. You have a test1.txt and test2.txt files with its signatures signatur1 and
signature2.
2. signatur1 and signature2 were signed using my private key using the
following command :
openssl rsautl -sign -in hash -inkey private-key -out signature
3. Upload all of them to your node using pscp.
4. determine which file was modified using the following commands
hash a file : openssl dgst -md5 -out hash file
verify a file : openssl rsautl -verify -in signature -pubin -inkey public-key
-out hash2
Note1: you should use my public key.

Note2: commands used to generate RSA public/private keys:


generate private rsa key 1024: openssl genrsa -out private-key 1024
generate public rsa key :openssl rsa -in private-key -pubout -out public-
key

Task 3: Known-plaintext attack

Now, download the plainknown.txt ,cipherknown.txt and keys.txt [upload them to


your node using pscp].You know that aes-128-cbc was used to generate the ciphertext
from the plaintext. You also know that the numbers in the initialization vector (IV) are all
zeros Another clue is that the key, used to encrypt this plaintext, is one of keys in
keys.txt. Your goal is to write a script to find out this key.

Note : you can use the command line tools provided by openssl to encrypt and decrypt
messages inside your script .

You might also like