User Bush

77 votes

1 answer

61k views

Can you explain Bleichenbacher's CCA attack on PKCS#1 v1.5?

asked Jan 2, 2014 at 14:24

17 votes

2 answers

31k views

Can you explain “weak keys” for DES?

asked Dec 8, 2013 at 21:30

9 votes

2 answers

4k views

What are Cryptographic Multi-linear Maps?

asked May 13, 2014 at 16:10

7 votes

1 answer

9k views

HMAC ipad and opad choice

asked Dec 7, 2014 at 21:11

6 votes

2 answers

378 views

Hamiltonicity proof of knowledge

asked Jun 3, 2014 at 9:53

5 votes

1 answer

1k views

Why does a perfect secrecy can be achieved when decryption correctness is not totally required?

asked Jan 31, 2014 at 15:16

5 votes

2 answers

1k views

Can we say that if $P=NP$ there is no CPA secure public key encryption?

asked Dec 21, 2013 at 17:10

5 votes

2 answers

3k views

What is the limit of plaintext required to break the Vigenère encryption?

asked Oct 27, 2013 at 22:16

4 votes

1 answer

2k views

Is CBC mode encryption vulnerable to a reordering attack?

asked Nov 19, 2013 at 20:45

4 votes

0 answers

441 views

What is the fixed point attribute of DES (when used with weak-keys) [duplicate]

asked Dec 19, 2014 at 17:14

3 votes

1 answer

403 views

Periodic One Way Function

asked Jan 11, 2016 at 14:39

3 votes

1 answer

852 views

Can you help me with this DES variant analysis?

asked Dec 7, 2013 at 23:02

3 votes

1 answer

2k views

Is $q(n)=1/n$ a negligible function?

asked Nov 22, 2013 at 22:50

3 votes

1 answer

316 views

What is a Message Transmission Scheme?

asked Dec 7, 2013 at 12:12

2 votes

2 answers

980 views

Why can we always assume that $Gen$ algorithm choose key uniformly?

asked Nov 16, 2013 at 17:11

2 votes

1 answer

656 views

Bellovin 96' attack on IPsec ESP protocol on encryption only option

asked Nov 16, 2013 at 20:24

2 votes

0 answers

391 views

Can you show how that RSA does/doesn't provide anonymity?

asked Jan 9, 2014 at 9:29

1 vote

2 answers

765 views

Can you prove the existance of a PRG $G$ s.t. for each even $k$: $G(k)=G(k+1)$?

asked Feb 1, 2014 at 11:24

1 vote

2 answers

207 views

PPT eavesdroper able to output $m_{0}$ and $m_{1}$ of different lengths

asked Nov 9, 2013 at 12:07

1 vote

1 answer

106 views

PRP representation size

asked Dec 7, 2013 at 17:08

1 vote

0 answers

342 views

PRG variant as a commitment scheme

asked Dec 11, 2014 at 9:15

Stack Exchange Network

21 Questions

Can you explain Bleichenbacher's CCA attack on PKCS#1 v1.5?

Can you explain “weak keys” for DES?

What are Cryptographic Multi-linear Maps?

HMAC ipad and opad choice

Hamiltonicity proof of knowledge

Why does a perfect secrecy can be achieved when decryption correctness is not totally required?

Can we say that if $P=NP$ there is no CPA secure public key encryption?

What is the limit of plaintext required to break the Vigenère encryption?

Is CBC mode encryption vulnerable to a reordering attack?

What is the fixed point attribute of DES (when used with weak-keys) [duplicate]

Periodic One Way Function

Can you help me with this DES variant analysis?

Is $q(n)=1/n$ a negligible function?

What is a Message Transmission Scheme?

Why can we always assume that $Gen$ algorithm choose key uniformly?

Bellovin 96' attack on IPsec ESP protocol on encryption only option

Can you show how that RSA does/doesn't provide anonymity?

Can you prove the existance of a PRG $G$ s.t. for each even $k$: $G(k)=G(k+1)$?

PPT eavesdroper able to output $m_{0}$ and $m_{1}$ of different lengths

PRP representation size

PRG variant as a commitment scheme