Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

0 votes
1 answer
25 views

What is a ciphering key?

1 vote
1 answer
12 views

Σ-protocol that proves an even number was committed using Pedersen commitment scheme

0 votes
1 answer
35 views

Relative bits of security of slower functions

3 votes
2 answers
1k views

Which is better ECDHE with TLS 1.0

0 votes
3 answers
52 views

Generalizing AES s-box circular shifts in bigger GF

1 vote
1 answer
119 views

How many queries can you do (concretely, not asymptotically) for a balanced Feistel network with 7 rounds?

2 votes
2 answers
40 views

What is the difference between AES-CCM8 mode and AES-CCM mode?

0 votes
1 answer
36 views

Question on notation of random variables in probability ensembles

1 vote
1 answer
31 views

What are the key difference between Shannon entropy and Guessing Entropy?

2 votes
1 answer
149 views

Secret only known on consensus

0 votes
0 answers
38 views

Attack against stream cipher (LFSR with ASCII)

1 vote
1 answer
35 views

Do RSA powers of two modulus always have MSB set to one and so when DER encoded have 0x00 prefix?

3 votes
1 answer
955 views

DES: how does Richard Outerbridge's Initial Permutation operate?

0 votes
1 answer
51 views

Some misunderstanding on the Security Proof with Oracle

2 votes
1 answer
260 views

Security of equal discrete logs (over different bases)

-2 votes
0 answers
57 views

Give ordering as A<B<C<D by comparing MiMC,Poseidon, Pedersen and SHA256 in terms of Gas cost, capacity, proof generation efficiency, proof size [closed]

-1 votes
0 answers
24 views

"After receiving the input and converting the unique value of each character stored in the plaintext into an integer m" Please let me know this part [closed]

0 votes
0 answers
34 views

Secure communication over insecure channel is based on the assumption of secure channel?

1 vote
1 answer
46 views

Hash of concatenated values (one public, one private)

0 votes
1 answer
50 views

How should you manage keys to prevent lateral movement?

1 vote
1 answer
260 views

What is the current security level of an algorithm?

4 votes
2 answers
153 views

Cryptography based on #P-complete problems

4 votes
2 answers
285 views

Making a cipher non-malleable using a plaintext transform?

3 votes
0 answers
59 views

Can you rely on the permutation of a ciphertext for secrecy?

1 vote
1 answer
120 views

OAEP security with variable length hash function

3 votes
0 answers
43 views

All-or-nothing transform that doesn't increase message size?

0 votes
0 answers
99 views

Storing secrets on a peer-to-peer network by splitting up AONT data

8 votes
2 answers
2k views

On what Galois field AES really works?

1 vote
0 answers
148 views

Would a key recovery attack on ChaCha's keystream would be made more secure with an AONT?

-2 votes
1 answer
114 views

Increasing the brute force search time by repeatedly using an an all-or-nothing transform as padding [closed]

3 votes
1 answer
312 views

Is this an acceptable All-or-Nothing Transform?

1 vote
2 answers
227 views

Can Reed Solomon parity blocks be used as an all-or-nothing transform?

6 votes
1 answer
454 views

Length-preserving all-or-nothing transform

0 votes
0 answers
22 views

Simple scheme to publish data with a private key

5 votes
1 answer
183 views

How to sign commited group elements?

1 vote
3 answers
79 views

Understanding public key in certificate precisely

0 votes
1 answer
43 views

Alternative to CBC mode encryption?

0 votes
0 answers
71 views

How to prove knowledge of a secret and allow the receiver to deduplicate it?

0 votes
0 answers
33 views

How to quantify privacy, when using homomorphic encryption?

0 votes
1 answer
21 views

AES GCM mode - what is ouput in that scheme?

1 vote
1 answer
1k views

Reversible Decryption in Symmetric Key Algorithms

13 votes
1 answer
2k views

Is lattice-based cryptography practical?

1 vote
1 answer
55 views

Input size recomendation of sequence for each test in NIST SP 800-22

1 vote
0 answers
63 views

How fast is GHASH and what does it do?

0 votes
1 answer
57 views

|RSA| Is it normal for $\phi(n)$ to work as RSA modulus?

2 votes
1 answer
32 views

Validating AES GCM authentication tag between two different implementations

1 vote
0 answers
33 views

Proving stategies for computational properties

0 votes
0 answers
39 views

What does it mean to break non-invertible stream cipher?


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.