/g/ - Thread 106355405

Anonymous 8/23/2025, 9:59:02 AM No.106355405 >>106355435 >>106355446 >>106355484 >>106355484 >>106356487 >>106356904

IMG_20241006_023812_451.png md5: e83e60cf... 🔍

is Kuznyechik(Serpent(Camellia)) enough or should I combine it with AES(Twofish) too?

Anonymous 8/23/2025, 10:05:05 AM No.106355435 >>106355477

>>106355405 (OP)
Is AES-256 not enough for you mad cunt?

Anonymous 8/23/2025, 10:07:11 AM No.106355446

>>106355405 (OP)
Blowfish + SHA-2 512.

Anonymous 8/23/2025, 10:15:04 AM No.106355477 >>106355504

>>106355435
what if it's broken / backdoored?

Anonymous 8/23/2025, 10:17:12 AM No.106355484 >>106356462

>>106355405 (OP)
>>106355405 (OP)
Kuznyechik is interesting. It is suspected by some to have a backdoor. For instance, Botan (crypto library used in KeePassXC) documentation sums it up:

>The sbox of this cipher is supposedly random, but was found to have a mathematical structure which is exceedingly unlikely to have occurred by chance. This may indicate the existence of a backdoor or other issue. Avoid using this cipher unless strictly required.

But the Veracrypt dev stated his reasoning for keeping the Kuznyechik cipher in Veracrypt:

>This leads me to think that maybe there is another interesting possibility: the designer of Streebog and Kuznyechic are aware of new type of algebraic attacks affecting modern ciphers and hash functions and they wanted to ensure that these algorithms are immune against this attack without revealing anything about the attacks they are protecting against!

He goes on to state the same thing happened with DES.

https://github.com/veracrypt/VeraCrypt/issues/419

He removed SM4, the Chinese national cipher, I think because he considered it insecure.

As for your question OP, AES is probably fine. It's been looked at more than any other cipher.

Anonymous 8/23/2025, 10:19:59 AM No.106355504

1753998204256432.png md5: dd048b00... 🔍

>>106355477
If someone found a practical backdoor, it would be worth billions (not just millions) to governments and corporations, because the entire global economy depends on it (TLS, VPNs, disk encryption, etc.). If there’s a backdoor, whoever has it is sitting on the most valuable secret in the world. Cascades (AES+Twofish, Kuznyechik+Serpent, etc.) are fine for peace of mind, but practically, you’re far more likely to get compromised through side channels, poor opsec, or metadata than through AES itself.

Anonymous 8/23/2025, 1:25:07 PM No.106356462

>>106355484
we need Kuznyechik(AES(Camellia))

Anonymous 8/23/2025, 1:28:03 PM No.106356487 >>106356535

1747020474887417.jpg md5: 80d10a99... 🔍