User mephisto

1 vote

How do I construct the Fn family of functions of WOTS+ using SHA3?

answered Jul 16, 2021 at 16:32

1 vote

Are my calculations about WOTS parameters correct?

answered Jul 16, 2021 at 16:17

1 vote

Accepted

Making WOTS+ public keys shorter

answered Jul 15, 2021 at 8:51

2 votes

Can we use a Merkle Tree structure to reduce digest size?

answered Dec 15, 2020 at 8:57

0 votes

Accepted

How do discrete logarithm with modulo a prime and a non-prime compare?

answered Aug 16, 2019 at 4:18

6 votes

Attack on security model for RSA-FDH

answered Aug 16, 2019 at 1:07

2 votes

Symmetric Key Encryption is not Authentication?

answered Dec 17, 2018 at 8:55

2 votes

Accepted

Combining classical attacks and quantum cryptanalysis

answered Oct 25, 2018 at 8:30

3 votes

Accepted

Could we use a more efficient hash for signature generation?

answered Oct 20, 2018 at 22:44

1 vote

Practical quantum attacks on SHA256 MAC and HMAC

answered Oct 16, 2018 at 22:08

2 votes

Accepted

How many messages before Sphincs(+) becomes insecure?

answered Sep 15, 2018 at 12:02

1 vote

What is the connection between "replay attack" to CCA security?

answered Aug 7, 2018 at 8:36

4 votes

What is the mathematical property stating that it is hard to find a collision in the AES algorithm?

answered Jul 26, 2018 at 22:34

6 votes

Accepted

Security of XORing hashes vs concatenating

answered May 9, 2018 at 12:15

4 votes

Information-theoretic security

answered Apr 27, 2018 at 8:10

1 vote

Keyed reversible hash function?

answered Apr 4, 2018 at 9:01

1 vote

Accepted

Effect of tail cutting and precision of discrete Gaussian sampling on LWE / Ring-LWE security

answered Apr 2, 2018 at 15:12

2 votes

Accepted

Does a concatenation of hashes of differently prefixed variations of any chosen message contain all possible finite bitstrings?

answered Mar 7, 2018 at 8:34

2 votes

Accepted

Bitmasks or seed along with public key in WOTS+ post-quantum signatures

answered Mar 5, 2018 at 9:50

4 votes

Accepted

Real world performance of (still theoretical) Grover's Algorithm

answered Feb 11, 2018 at 0:18

1 vote

Winternitz-OTS+ with Poly1305

answered Feb 7, 2018 at 10:11

1 vote

Smallest 256-bit security hash-based OTS?

answered Jan 4, 2018 at 17:18

2 votes

Blind Hash Signatures?

answered Dec 31, 2017 at 12:26

6 votes

How to use SPHINCS+?

answered Dec 31, 2017 at 12:21

7 votes

Accepted

Difference Between Gravity-SPHINCS and SPHINCS+?

answered Dec 29, 2017 at 17:16

6 votes

Accepted

Most Compact Secure Post-Quantum Signatures and Public Keys?

answered Dec 18, 2017 at 11:09

2 votes

Confusion about security of quantum key distribution

answered Sep 5, 2017 at 9:12

1 vote

Are Two Ciphers Better Than One? i.e. RC4 and AES

answered Aug 25, 2017 at 9:12

4 votes

Idiomatic description for an adversary in possesion of a quantum computer?

answered Jul 11, 2017 at 9:56

3 votes

Why do we need Collision Resistant Hash Function for the Merkle Tree Signature Scheme?

answered May 3, 2017 at 22:08

Stack Exchange Network

80 Answers

How do I construct the Fn family of functions of WOTS+ using SHA3?

Are my calculations about WOTS parameters correct?

Making WOTS+ public keys shorter

Can we use a Merkle Tree structure to reduce digest size?

How do discrete logarithm with modulo a prime and a non-prime compare?

Attack on security model for RSA-FDH

Symmetric Key Encryption is not Authentication?

Combining classical attacks and quantum cryptanalysis

Could we use a more efficient hash for signature generation?

Practical quantum attacks on SHA256 MAC and HMAC

How many messages before Sphincs(+) becomes insecure?

What is the connection between "replay attack" to CCA security?

What is the mathematical property stating that it is hard to find a collision in the AES algorithm?

Security of XORing hashes vs concatenating

Information-theoretic security

Keyed reversible hash function?

Effect of tail cutting and precision of discrete Gaussian sampling on LWE / Ring-LWE security

Does a concatenation of hashes of differently prefixed variations of any chosen message contain all possible finite bitstrings?

Bitmasks or seed along with public key in WOTS+ post-quantum signatures

Real world performance of (still theoretical) Grover's Algorithm

Winternitz-OTS+ with Poly1305

Smallest 256-bit security hash-based OTS?

Blind Hash Signatures?

How to use SPHINCS+?

Difference Between Gravity-SPHINCS and SPHINCS+?

Most Compact Secure Post-Quantum Signatures and Public Keys?

Confusion about security of quantum key distribution

Are Two Ciphers Better Than One? i.e. RC4 and AES

Idiomatic description for an adversary in possesion of a quantum computer?

Why do we need Collision Resistant Hash Function for the Merkle Tree Signature Scheme?