Cryptography Stack Exchange

1

vote

2

answers

21

views

Cipher Block chaining but with encrypting the plain text first then xor with IV

cbc modes-of-operation

modified 6 mins ago kelalaka 16.9k

0

votes

1

answer

15

views

Using the output of HKDF directly

hmac hkdf

modified 29 mins ago Maarten Bodewes♦ 67.3k

2

votes

1

answer

77

views

ChaCha20-Poly1305: Can my salt/pass for a KDF also be the nonce?

key-derivation salt nonce chacha

modified 31 mins ago Maarten Bodewes♦ 67.3k

2

votes

1

answer

60

views

Using 0 nonce for AES-256 in CTR mode

aes ctr

modified 32 mins ago kelalaka 16.9k

0

votes

0

answers

20

views

Secure File Transfer with Individual Control [migrated]

encryption

modified 1 hour ago Maarten Bodewes♦ 67.3k

0

votes

0

answers

4

views

Secure pseudo-random keys using a true random seed + blob of data

hash random-number-generator pseudo-random-generator

asked 1 hour ago RevFlash 81

12

votes

3

answers

9k

views

Multiplicative inverse in $\operatorname{GF}(2^8)$?

aes finite-field

modified 2 hours ago fgrieu 96.6k

0

votes

0

answers

20

views

How to forge a signature in a custom PMAC implementation

mac forgery

asked 4 hours ago nobody 1

0

votes

0

answers

33

views

why Java does not support KMAC algorithm out of the box? [closed]

hmac kmac programming-interface

modified 5 hours ago AleksanderRas 5,385

-2

votes

0

answers

17

views

Can anyone help me with this code? Related to Base64 Encoding [closed]

encryption

asked 5 hours ago 나현섭 1

0

votes

0

answers

11

views

LSIM library based on LibScarab

homomorphic-encryption

asked 6 hours ago Daniel K 187

1

vote

1

answer

53

views

What does non-collusion assumption mean in server-aided protocol based on secret sharing?

modified 7 hours ago Community♦ 1

1

vote

2

answers

79

views

multiplicative inverse [duplicate]

aes

modified 7 hours ago fgrieu 96.6k

0

votes

1

answer

109

views

hash algorithm for user accounts passwords in macOS 10.12, 10.13, 10.14

password-hashing

modified 8 hours ago Community♦ 1

0

votes

0

answers

13

views

A variant of LPN problem

lattice-crypto

asked 11 hours ago M.Z. 13

3

votes

1

answer

176

views

FHE over the integers - Is that paper's scheme known to be insecure against quantum adversaries?

homomorphic-encryption post-quantum-cryptography

answered 13 hours ago Robert Green 19

0

votes

0

answers

18

views

Calculate the complexity of HKDF with a 96bit salt and a 128bit key?

complexity salt hkdf

asked 19 hours ago jumpifnot0 35

0

votes

0

answers

15

views

Three Pass Protocol Question!

encryption public-key prime-numbers decryption three-pass-protocol

asked 19 hours ago sherrie1618 1

1

vote

1

answer

50

views

Why GCM operation mode with AES-128 is recomended and can we use AES-192 and AES-256 with GCM?

aes aes-gcm

modified 21 hours ago Henno Brandsma 3,554

0

votes

0

answers

23

views

Using PSK starting a new session, encrypt the new session key with old, or sign a derivative to be used on the old key?

key-exchange key-derivation chacha

modified 21 hours ago jumpifnot0 35

2

votes

2

answers

89

views

Diffie-Hellman in Https: How are prime numbers picked?

diffie-hellman tls prime-numbers

modified 23 hours ago poncho 104k

3

votes

1

answer

91

views

Given a ciphertext $c$ and a public string, how do we check whether $c$ encrypts something that is roughly equal to the string without decryption?

zero-knowledge-proofs

modified 23 hours ago Community♦ 1

0

votes

0

answers

13

views

How does a rectilinear filter used for QKD-BB84 detect both horizontal and vertical polarizations?

post-quantum-cryptography

asked yesterday Evariste 46

0

votes

0

answers

23

views

How is QKD (Quantum Key Distribution) advantageous over McEliece/AES?

post-quantum-cryptography mceliece

asked yesterday Evariste 46

1

vote

0

answers

34

views

Security of ECC over finite fields of characteristic $p\approx2^{50\pm10}$?

elliptic-curves

modified yesterday Rascalniikov 11

12

votes

1

answer

5k

views

Diffie-Hellman: choosing wrong generator “g” parameter and its implications of practical attacks

diffie-hellman

modified yesterday kelalaka 16.9k

2

votes

0

answers

13

views

Does the size of data to be encrypted influence the security of Gmac?

gcm

asked yesterday retr0 53

1

vote

0

answers

9

views

TDES(Triple DES) DUKPT decryption

encryption decryption

modified yesterday AleksanderRas 5,385

0

votes

0

answers

8

views

XTZ Private Key

public-key

asked yesterday Alain 1

2

votes

2

answers

145

views

Bijection Between Real View and Simulated View

zero-knowledge-proofs

answered yesterday Bas Spitters 101

1

vote

0

answers

42

views

Help on Algebraic Side Channel Attacks

cryptanalysis post-quantum-cryptography side-channel-attack algebraic-attack

modified yesterday Ievgeni 400

2

votes

2

answers

37

views

Mathematical definition of deterministic and non-deterministic random bit generators

random-number-generator randomness pseudo-random-function

answered yesterday fgrieu 96.6k

0

votes

0

answers

23

views

Are there any algorithms for which generating any zero-knowledge proofs is not practical?

encryption public-key algorithm-design zero-knowledge-proofs complexity

asked yesterday TX-PFP 1

0

votes

0

answers

15

views

Repeatable encryption for pseudonymisation

encryption

asked yesterday Paul Gerarts 101

1

vote

1

answer

55

views

Can quantum algorithms solve the approximate GCD hard problem efficiently?

post-quantum-cryptography hardness-assumptions quantum-cryptanalysis

modified yesterday Ievgeni 400

0

votes

0

answers

15

views

How to find/determine the Polybius Square Key and Additive Key, if only the Cipher Text is known, in Nihilist Cipher?

attack classical-cipher

asked yesterday Razor Sharp 1

1

vote

0

answers

65

views

How to reverse this simple xor encryption function? [closed]

xor

modified yesterday Gordon 11

0

votes

1

answer

45

views

Discrete log problem exponential runtime

discrete-logarithm group-theory

answered yesterday mentallurg 606

0

votes

1

answer

32

views

Length extension attacks, Merkle–Damgård constructions, and HMACs

hmac merkle-damgaard length-extension

answered yesterday Luis Casillas 11.7k

1

vote

1

answer

52

views

Ensure Data Integrity In An ECDH Key Excange

elliptic-curves key-exchange integrity

modified yesterday Community♦ 1

0

votes

0

answers

34

views

Discrete log zero knowledge proof lying case

zero-knowledge-proofs

modified 2 days ago kelalaka 16.9k

2

votes

1

answer

50

views

Randomness of Decision Learning With Error Problem

post-quantum-cryptography lattice-crypto lwe

modified 2 days ago kelalaka 16.9k

3

votes

1

answer

111

views

Is this a PRF? Fk(x) = G(k⊕x) where G is a PRG

pseudo-random-generator pseudo-random-function

answered 2 days ago Luis Casillas 11.7k

1

vote

0

answers

40

views

Bilinear Map over RSA group

pairings

modified 2 days ago kelalaka 16.9k

1

vote

0

answers

36

views

Game-based proofs and semantic security

provable-security security-definition semantic-security

modified 2 days ago CryptoNewbie 11

2

votes

1

answer

1k

views

What are the known weaknesses in AES and is it being considered for upgrade or replacement? [closed]

aes

modified 2 days ago vy32 337

0

votes

1

answer

26

views

Publicly verifiable secret sharing scheme

modified 2 days ago Fiono 187

3

votes

1

answer

234

views

What happens if no final subtraction is done in Montgomery multiplication?

elliptic-curves modular-arithmetic montgomery-multiplication

answered 2 days ago y s 21

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.