Reputation
13,616
Next tag badge:
97/100 score
17/20 answers
Badges
1 34 69
Newest
 Nice Answer
Impact
~259k people reached

Feb
10
answered Attacking multi block MAC constructions
Feb
10
answered Why does NaCL have different keys for signing and encryption?
Jan
27
answered Is there a strong cryptographic reason for GCM's 2^39 - 256 bit limit?
Jan
26
answered How does BLAKE2 ensure that hash(A) != hash(B) when B = A||0 and both A & B have the same number of blocks?
Jan
9
answered Discrepancy with reported key size for EDE ciphers in Qualys SSL Labs
Jan
7
answered What is the keyspace of ROT-13?
Jan
3
answered C# implementation of curve25519 to ed25519 conversions
Dec
25
answered Security concern about reducing hash value using modulo operation
Dec
24
answered Do Brute-Force Attacks and Cryptanalysis refute Kerckhoffs's principle?
Dec
21
answered Best hash-algorithm
Dec
17
answered Dancing confusion with Daniel J. Bernstein's stream ciphers
Dec
12
answered Decrypt all RSA ciphertexts if you can break 1% of them
Dec
3
answered I don't care about replay attacks. What should I do with the nonce in nacl?
Nov
19
answered What happens when cbc+hmac get a replay attack?
Nov
19
answered Where have all the cypherpunks gone?
Nov
10
answered what is SALSA20 Nonce and its requirements
Nov
4
answered Can DH_anon really be exploited by an attacker?
Sep
16
answered salsa20 is invertible, useless in CTR mode?
Sep
16
answered Is Rabin's cryptosystem secure against known-plaintext attacks?
Sep
3
answered Entropy of the key