Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

3 votes
1 answer
65 views

How much can we compress RSA public keys with two equal size factors?

2 votes
1 answer
609 views

Ed25519 to X25519 transportation

0 votes
0 answers
15 views

EC public key wiith leading zeros

1 vote
0 answers
26 views

2FA browser plugins are sufficiently secure - or not?

1 vote
1 answer
22 views

Question about the notation $H\leftarrow\mathcal{H}_{\mathcal{K}}$ in an IND-CCA security experiment

-3 votes
0 answers
24 views

Prove that F is a secure PRF [closed]

1 vote
0 answers
30 views

"crandall" - unsolved CTF challenge - ASIS-quals-2023

0 votes
2 answers
82 views

If it is proved that P=NP, what happens to crypto? [duplicate]

0 votes
0 answers
15 views

Devops online certification course [closed]

-1 votes
0 answers
17 views

Are there any obvious vulnerabilities/flaws in my secure communications scheme, specifically in the way I use sequence numbers in messages? [closed]

2 votes
0 answers
78 views

Source of encryption scheme used in blockchain based IoT

2 votes
3 answers
119 views

What's the name of the property of ideal cryptographic hash functions that effectively make it a random number generator?

0 votes
0 answers
27 views

Proof of reputation on a subject

16 votes
3 answers
21k views

Has AES-128 been fully broken?

1 vote
0 answers
17 views

knowledge soundness in IVC paper

5 votes
2 answers
813 views

Weaker alternative to Ed25519?

1 vote
0 answers
59 views

Does ECC give the most secure assymetric cipher for a given public key size?

0 votes
0 answers
18 views

Is ECC by far the most secure two-key cipher of equal key length? [duplicate]

0 votes
2 answers
64 views

How to prove that an algorithm is the time optimal algorithm for implementing a problem?

2 votes
1 answer
78 views

Entropy extraction from a Zerner diode TRNG

3 votes
1 answer
927 views

Why do we need additional secret value (k) in ECDSA?

2 votes
1 answer
206 views

Elliptic Curve digital signature algorithm without "hashing to point"?

1 vote
1 answer
156 views

Cryptography to tackle deepfake, proving the photo is original

0 votes
0 answers
55 views

Distinguishing between two DDH-like tuples

4 votes
2 answers
108 views

Can blockchain be considered a cryptographic primitive?

0 votes
0 answers
22 views

What is the probability of accidentally getting a seed phrase that is associated with a real address with a balance in the bitcoin blockchain? [migrated]

1 vote
1 answer
52 views

Definition of Dual Lattice

0 votes
0 answers
38 views

Got a Cipher that I'm stuck on! [closed]

-2 votes
0 answers
32 views

In openssl, if I decrypt using a wrong password it just tells "bad decrypt" without showing the output. Is there a way to show it anyway? [closed]

0 votes
0 answers
29 views

Cryptanalysis of S-box [closed]

1 vote
1 answer
84 views

Is it safe to derive a Falcon512 key pair from a XOF output?

1 vote
1 answer
167 views

Truncating ciphertext as encryption and to decrease bandwidth in code-based PKEs

0 votes
1 answer
43 views

which zero knowledge proof technique is suitable for identity verification system?

0 votes
0 answers
45 views

ElGamal signature scheme problem and unsure whether my calculations are wrong or that's the answer

20 votes
3 answers
9k views

Pre-image resistant but not 2nd pre-image resistant?

2 votes
1 answer
262 views

Signature using RSA (as described in Cryptography engineering)

3 votes
0 answers
356 views

Security of Full Domain Hash (or not quite full)

1 vote
2 answers
224 views

Can I move elements from cyclic subgroup to its cyclic parent group?

0 votes
0 answers
108 views

Do "superfast" keyed hash functions exist?

0 votes
1 answer
101 views

NIST PQC: minimum number of digital signatures

2 votes
1 answer
223 views

Is there an algebra group (or ring) in which computing the inverse element is hard without some trapdoor information?

5 votes
2 answers
1k views

Are curve secp256k1 ECDSA signatures distinguishable from random data?

0 votes
0 answers
79 views

Textbook RSA on random numbers mod a smaller prime

1 vote
1 answer
85 views

Proving an identification-scheme based on a digital signature is secure

1 vote
1 answer
52 views

Division in Finite Rings of Order 2^ℓ

0 votes
1 answer
46 views

Is there an open source key-derivation service?

1 vote
1 answer
61 views

Sigma parameter from Trapdoors for Lattices

4 votes
1 answer
88 views

Robust CMAC-based key derivation function


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.