User user93353

39 votes

2 answers

59k views

Why is HMAC-SHA1 still considered secure?

asked Jun 25, 2015 at 8:46

20 votes

1 answer

46k views

Is PKCS7 a signature format or a certificate format?

asked Jun 15, 2016 at 5:42

9 votes

2 answers

1k views

Has there ever been any real world consequences of using probabilistic primality tests for RSA or other similar systems?

asked Jul 2, 2021 at 15:16

6 votes

1 answer

568 views

How does GHASH used in GCM behave as a universal hashing function?

asked Feb 12, 2021 at 11:21

6 votes

1 answer

837 views

Dan Boneh's Cryptography lecture - problem with 802.11b

asked Jun 25, 2015 at 10:53

6 votes

1 answer

3k views

Why Abstract Algebra in Cryptography?

asked Nov 26, 2020 at 2:23

6 votes

1 answer

672 views

Arithmetic Circuits to R1CS. Do we consider addition gates or not?

asked Jan 27, 2023 at 11:31

5 votes

1 answer

336 views

Why such a complicated way of cofactor clearing?

asked Sep 2, 2022 at 9:02

5 votes

3 answers

725 views

When working in a subgroup of EC in EdDSA (especially Ed255190), how is it OK to use operations different from that of the main group?

asked Sep 12, 2022 at 2:00

4 votes

1 answer

337 views

Why does Index Calculus work?

asked Sep 3, 2021 at 0:31

4 votes

2 answers

765 views

What are the differences between a UHF (as used in cryptography) and a cryptographic hash function?

asked Feb 15, 2021 at 6:16

4 votes

3 answers

597 views

Pohlig-Hellman: While solving in a subgrp, why is multiplication done mod the parent group's $p$ while the exponent is expanded as per $p_i$ of subgrp

asked May 21, 2021 at 6:18

4 votes

2 answers

2k views

One time pad - how is the difference in length between the plain text & the OTP handled?

asked Nov 2, 2020 at 8:20

4 votes

2 answers

567 views

How can a collision be generated in this hash function by inverting the encryption?

asked Jan 1, 2021 at 7:27

4 votes

1 answer

393 views

Stream Ciphers and cycling questions

asked Oct 3, 2015 at 4:13

4 votes

1 answer

4k views

Does maximum length of CN in a x509 cert include the length of the OIDs?

asked Dec 22, 2017 at 8:46

4 votes

2 answers

770 views

Crypto USB Devices - where is the PIN/Password stored?

asked Jan 7, 2013 at 8:05

4 votes

2 answers

1k views

Perfect Forward Secrecy in TLS

asked Apr 13, 2014 at 10:28

4 votes

1 answer

458 views

How can a verifier benefit from being malicious or dishonest in a Zero Knowledge interactive proof?

asked Mar 10, 2023 at 8:40

4 votes

1 answer

547 views

Understanding the small cofactor attack with Elliptic Curves of non-prime order

asked Aug 18, 2022 at 11:18

4 votes

2 answers

290 views

What would be the degree (or range of the degree) of the polynomial used in real life zkSnarks as used in blockchains?

asked Dec 22, 2022 at 7:31

3 votes

1 answer

122 views

Why is Lagrange interpolation required in Batch Opening case of KZG/Kate PCS?

asked Jan 12, 2023 at 7:52

3 votes

1 answer

110 views

Question about the soundness of using a pairing map in the Kate Polynomial Commitment Scheme

asked Jan 17, 2023 at 9:47

3 votes

1 answer

96 views

How do I construct a recursive polynomial as required in PLONK?

asked Apr 7, 2023 at 8:53

3 votes

1 answer

194 views

How will the ability to do comparison or modulo efficiently in Finite Cyclic Groups break Elliptic Curve Cryptography?

asked Jan 27, 2023 at 8:07

3 votes

1 answer

69 views

What does preprocessed polynomial mean in the context of PLONK?

asked May 8, 2023 at 5:45

3 votes

1 answer

179 views

PLONK: Why is the quotient polynomial multiplied by different powers of a challenge?

asked May 9, 2023 at 12:00

3 votes

0 answers

2k views

Determining the algorithm used to generate a digital signature

asked Jan 1, 2013 at 14:33

3 votes

1 answer

2k views

XOR LFSR and all zero state

asked Sep 3, 2020 at 7:43

3 votes

1 answer

897 views

Blockchain use in record management

asked Dec 29, 2016 at 11:46

Stack Exchange Network

114 Questions

Why is HMAC-SHA1 still considered secure?

Is PKCS7 a signature format or a certificate format?

Has there ever been any real world consequences of using probabilistic primality tests for RSA or other similar systems?

How does GHASH used in GCM behave as a universal hashing function?

Dan Boneh's Cryptography lecture - problem with 802.11b

Why Abstract Algebra in Cryptography?

Arithmetic Circuits to R1CS. Do we consider addition gates or not?

Why such a complicated way of cofactor clearing?

When working in a subgroup of EC in EdDSA (especially Ed255190), how is it OK to use operations different from that of the main group?

Why does Index Calculus work?

What are the differences between a UHF (as used in cryptography) and a cryptographic hash function?

Pohlig-Hellman: While solving in a subgrp, why is multiplication done mod the parent group's $p$ while the exponent is expanded as per $p_i$ of subgrp

One time pad - how is the difference in length between the plain text & the OTP handled?

How can a collision be generated in this hash function by inverting the encryption?

Stream Ciphers and cycling questions

Does maximum length of CN in a x509 cert include the length of the OIDs?

Crypto USB Devices - where is the PIN/Password stored?

Perfect Forward Secrecy in TLS

How can a verifier benefit from being malicious or dishonest in a Zero Knowledge interactive proof?

Understanding the small cofactor attack with Elliptic Curves of non-prime order

What would be the degree (or range of the degree) of the polynomial used in real life zkSnarks as used in blockchains?

Why is Lagrange interpolation required in Batch Opening case of KZG/Kate PCS?

Question about the soundness of using a pairing map in the Kate Polynomial Commitment Scheme

How do I construct a recursive polynomial as required in PLONK?

How will the ability to do comparison or modulo efficiently in Finite Cyclic Groups break Elliptic Curve Cryptography?

What does preprocessed polynomial mean in the context of PLONK?

PLONK: Why is the quotient polynomial multiplied by different powers of a challenge?

Determining the algorithm used to generate a digital signature

XOR LFSR and all zero state

Blockchain use in record management