|Enlightened||First to answer and accepted with score of 10 or more. This badge can be awarded multiple times.|
Thomas Pornin earned this badge 18 times
oct 10 at 8:08understanding a length extension attack
oct 6 at 12:05Compressing EC private keys
jun 26 at 20:10Does the generator size matter in Diffie-Hellman?
may 10 '12 at 13:46What are the details of the DES weakness of reusing the same IV in CBC mode with the same key?
mar 30 '12 at 11:52How long would the 100 Year Cryptography Project have secured its data had it been started 100 years ago?
jan 14 '12 at 11:38Why does PBKDF2 xor the iterations of the hash function together?
jan 1 '12 at 7:51Known methods for constant time (table-free) AES implementation using 'standard' operations?
oct 30 '11 at 23:45Why can't one implement bcrypt in Cuda?
oct 9 '11 at 18:06What is the “Random Oracle Model” and why is it controversial?
aug 31 '11 at 8:36Does unbalancing a feistel cipher always improve security? Does it improve security at all?
aug 20 '11 at 16:25Should I use the first or last bits from a sha-256 hash?
aug 4 '11 at 6:14What is a white-box implementation of a cryptographic algorithm?
jul 26 '11 at 18:40Why do we append the length of the message in SHA-1 pre-processing?
jul 18 '11 at 9:29How were the DES S-box values determined?
jul 14 '11 at 17:40(post deleted or otherwise unavailable)
jul 13 '11 at 14:36What are the practical difference between 256-bit, 192-bit, and 128-bit AES encryption?
jul 13 '11 at 0:05What are the benefits of the two permutation tables in DES?