Cryptography Stack Exchange

0 votes

1 answer

25 views

What is a ciphering key?

Maarten Bodewes♦

84.5k

modified 29 mins ago

1 vote

1 answer

12 views

Σ-protocol that proves an even number was committed using Pedersen commitment scheme

zero-knowledge-proofs

knaccc

2,513

answered 57 mins ago

0 votes

1 answer

35 views

Relative bits of security of slower functions

hash provable-security security-definition

JAAAY

268

answered 1 hour ago

3 votes

2 answers

1k views

Which is better ECDHE with TLS 1.0

elliptic-curves diffie-hellman perfect-secrecy

dawklrw

21

modified 4 hours ago

0 votes

3 answers

52 views

Generalizing AES s-box circular shifts in bigger GF

aes s-boxes

Tom

795

modified 5 hours ago

1 vote

1 answer

119 views

How many queries can you do (concretely, not asymptotically) for a balanced Feistel network with 7 rounds?

feistel-network

CommunityBot

1

modified 8 hours ago

2 votes

2 answers

40 views

What is the difference between AES-CCM8 mode and AES-CCM mode?

encryption aes block-cipher ccm

Maarten Bodewes♦

84.5k

modified 11 hours ago

0 votes

1 answer

36 views

Question on notation of random variables in probability ensembles

provable-security security-definition semantic-security

Lev

11

answered 11 hours ago

1 vote

1 answer

31 views

What are the key difference between Shannon entropy and Guessing Entropy?

entropy

kodlu

16.1k

answered 12 hours ago

2 votes

1 answer

149 views

Secret only known on consensus

Glorfindel

387

modified 14 hours ago

0 votes

0 answers

38 views

Attack against stream cipher (LFSR with ASCII)

cryptanalysis stream-cipher known-plaintext-attack lfsr

RARA

123

modified 19 hours ago

1 vote

1 answer

35 views

Do RSA powers of two modulus always have MSB set to one and so when DER encoded have 0x00 prefix?

rsa encoding asn.1

Maarten Bodewes♦

84.5k

answered 21 hours ago

3 votes

1 answer

955 views

DES: how does Richard Outerbridge's Initial Permutation operate?

des permutation

mcpop

1

modified 21 hours ago

0 votes

1 answer

51 views

Some misunderstanding on the Security Proof with Oracle

cryptanalysis provable-security

CommunityBot

1

modified 21 hours ago

2 votes

1 answer

260 views

Security of equal discrete logs (over different bases)

discrete-logarithm reference-request

Daniel S

9,576

answered yesterday

-2 votes

0 answers

57 views

Give ordering as A<B<C<D by comparing MiMC,Poseidon, Pedersen and SHA256 in terms of Gas cost, capacity, proof generation efficiency, proof size [closed]

hash zero-knowledge-proofs sha-256 cryptocurrency circuit

Lucky

1

modified yesterday

-1 votes

0 answers

24 views

"After receiving the input and converting the unique value of each character stored in the plaintext into an integer m" Please let me know this part [closed]

pseudo-random-function one-way-function functional-encryption compression-function function-evaluation

GCU_Aria

1

asked yesterday

0 votes

0 answers

34 views

Secure communication over insecure channel is based on the assumption of secure channel？

multiparty-computation security-definition

Yang

28

modified yesterday

1 vote

1 answer

46 views

Hash of concatenated values (one public, one private)

hash collision-resistance

kelalaka

42.9k

modified yesterday

0 votes

1 answer

50 views

How should you manage keys to prevent lateral movement?

protocol-design protocol-analysis

CommunityBot

1

modified yesterday

1 vote

1 answer

260 views

What is the current security level of an algorithm?

cryptanalysis brute-force-attack key-size

CommunityBot

1

modified yesterday

4 votes

2 answers

153 views

Cryptography based on #P-complete problems

encryption complexity computational-complexity-theory

ckamath

4,463

modified yesterday

4 votes

2 answers

285 views

Making a cipher non-malleable using a plaintext transform?

encryption encoding malleability deniable-encryption aont

Maarten Bodewes♦

84.5k

modified yesterday

3 votes

0 answers

59 views

Can you rely on the permutation of a ciphertext for secrecy?

random-number-generator permutation aont

Maarten Bodewes♦

84.5k

modified yesterday

1 vote

1 answer

120 views

OAEP security with variable length hash function

hash symmetric sha-3 oaep aont

Maarten Bodewes♦

84.5k

modified yesterday

3 votes

0 answers

43 views

All-or-nothing transform that doesn't increase message size?

blocksize avalanche aont

Maarten Bodewes♦

84.5k

modified yesterday

0 votes

0 answers

99 views

Storing secrets on a peer-to-peer network by splitting up AONT data

encryption hash xor aont

Maarten Bodewes♦

84.5k

modified yesterday

8 votes

2 answers

2k views

On what Galois field AES really works?

aes finite-field

fgrieu♦

122k

modified yesterday

1 vote

0 answers

148 views

Would a key recovery attack on ChaCha's keystream would be made more secure with an AONT?

encryption stream-cipher chacha oaep aont

Maarten Bodewes♦

84.5k

modified yesterday

-2 votes

1 answer

114 views

Increasing the brute force search time by repeatedly using an an all-or-nothing transform as padding [closed]

brute-force-attack padding aont

Maarten Bodewes♦

84.5k

modified yesterday

3 votes

1 answer

312 views

Is this an acceptable All-or-Nothing Transform?

encryption hash algorithm-design aont

Maarten Bodewes♦

84.5k

modified yesterday

1 vote

2 answers

227 views

Can Reed Solomon parity blocks be used as an all-or-nothing transform?

encoding coding-theory aont

Maarten Bodewes♦

84.5k

modified yesterday

6 votes

1 answer

454 views

Length-preserving all-or-nothing transform

algorithm-design random-oracle-model aont

Maarten Bodewes♦

84.5k

modified yesterday

0 votes

0 answers

22 views

Simple scheme to publish data with a private key

encryption public-key aont

Maarten Bodewes♦

84.5k

modified yesterday

5 votes

1 answer

183 views

How to sign commited group elements?

signature commitments

CommunityBot

1

modified yesterday

1 vote

3 answers

79 views

Understanding public key in certificate precisely

certificates

Maarten Bodewes♦

84.5k

modified yesterday

0 votes

1 answer

43 views

Alternative to CBC mode encryption?

encryption cbc nist padding-oracle

Meir Maor

10.4k

answered 2 days ago

0 votes

0 answers

71 views

How to prove knowledge of a secret and allow the receiver to deduplicate it?

hash zero-knowledge-proofs

werwerqwrqwrwqr

1

modified 2 days ago

0 votes

0 answers

33 views

How to quantify privacy, when using homomorphic encryption?

encryption homomorphic-encryption differential-privacy machine-learning

werwerqwrqwrwqr

1

modified 2 days ago

0 votes

1 answer

21 views

AES GCM mode - what is ouput in that scheme?

aes-gcm

Tom

795

modified 2 days ago

1 vote

1 answer

1k views

Reversible Decryption in Symmetric Key Algorithms

algorithm-design symmetric

forest♦

12.9k

modified 2 days ago

13 votes

1 answer

2k views

Is lattice-based cryptography practical?

post-quantum-cryptography lattice-crypto

forest♦

12.9k

modified 2 days ago

1 vote

1 answer

55 views

Input size recomendation of sequence for each test in NIST SP 800-22

random-number-generator nist

CommunityBot

1

modified 2 days ago

1 vote

0 answers

63 views

How fast is GHASH and what does it do?

aes-gcm

kodlu

16.1k

modified 2 days ago

0 votes

1 answer

57 views

|RSA| Is it normal for $\phi(n)$ to work as RSA modulus?

rsa

JAAAY

268

modified May 13 at 11:41

2 votes

1 answer

32 views

Validating AES GCM authentication tag between two different implementations

aes authenticated-encryption openssl gcm aes-gcm

newiatester

23

modified May 13 at 10:42

1 vote

0 answers

33 views

Proving stategies for computational properties

zero-knowledge-proofs hardness-assumptions computational-complexity-theory

baro77

448

modified May 13 at 7:15

0 votes

0 answers

39 views

What does it mean to break non-invertible stream cipher?

stream-cipher

Tom

795

asked May 13 at 0:15

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.