Cryptography Stack Exchange

0

votes

0

answers

5

views

why is index “a non-negative integer less than 2^64” in the KDF for UMACs?

umac

asked 2 hours ago neubert 1,457

3

votes

2

answers

98

views

Why does square root $\pmod n$ find $p$ and $q$ (as $n = p \cdot q$)?

modified 5 hours ago kelalaka 9,780

8

votes

3

answers

2k

views

How to detect a failed AES256 decryption programmatically?

aes

answered 6 hours ago gnasher729 878

-1

votes

0

answers

16

views

Hey, anyone know if this is a color cryptography? If yes what? [on hold]

encryption

asked 7 hours ago EduManke 1

0

votes

1

answer

54

views

Asymmetric Encryption - How is the Public Key Being Shared?

public-key terminology

modified 8 hours ago Community♦ 1

0

votes

0

answers

24

views

Generating anomalous elliptic curves with given order [on hold]

elliptic-curves

modified 11 hours ago Maarten Bodewes♦ 58.4k

1

vote

0

answers

24

views

Are there any symmetric Partial Homomorphic Encryption Schemes?

encryption symmetric homomorphic-encryption

modified 12 hours ago sava 213

3

votes

1

answer

132

views

Decrypting arbitrary numbers with RSA

rsa key-exchange

modified 12 hours ago fgrieu 84.2k

3

votes

3

answers

304

views

What security risks does exposing the size of the plaintext entail?

aes block-cipher padding

answered 12 hours ago Gilles 10.1k

0

votes

0

answers

38

views

RSA, factoring with middle known bits of one prime?

rsa

asked 13 hours ago lurk 1

5

votes

4

answers

25k

views

How long would it take to brute force an AES-128 key?

encryption aes brute-force-attack

modified 13 hours ago Community♦ 1

0

votes

0

answers

17

views

Decrypting a weak PRNG Mersenne Twister Stream Cipher

stream-cipher pseudo-random-generator

asked 14 hours ago milck 1

-1

votes

0

answers

20

views

Can some one help and explain the decryption for below question? [on hold]

encryption

asked 14 hours ago Help 1

-1

votes

2

answers

71

views

Diffie-Hellman algorithm and MITM attack

diffie-hellman

modified 15 hours ago Maarten Bodewes♦ 58.4k

1

vote

1

answer

28

views

How to prove an encryption scheme is not CCA secure

chosen-plaintext-attack chosen-ciphertext-attack

modified 18 hours ago Occams_Trimmer 2,024

12

votes

1

answer

341

views

Is Pohlig-Hellman Cipher the only option?

discrete-logarithm pohlig-hellman commutative-encryption

modified 18 hours ago Community♦ 1

1

vote

0

answers

23

views

General factoring and one-way functions

factoring one-way-function hardness-assumptions

asked 19 hours ago Deepak K 6

4

votes

1

answer

253

views

Formal Verification of DHKE protocol using ProVerif

diffie-hellman provable-security

modified 19 hours ago Community♦ 1

0

votes

0

answers

19

views

Security of querying multiple Merkle trees

hash-tree

asked yesterday irakliy 398

10

votes

1

answer

2k

views

What is the difference between OTR and Signal protocols?

otr signal-protocol

modified yesterday Community♦ 1

3

votes

1

answer

111

views

Does knowing that the exponent is in a certain range help solving discrete log?

diffie-hellman discrete-logarithm attack

modified yesterday yyyyyyy 9,924

0

votes

1

answer

120

views

Signal protocol: when, and why, is X3DH run again between the same two users?

diffie-hellman protocol-design key-exchange signal-protocol

modified yesterday Community♦ 1

0

votes

0

answers

18

views

Partial key reuse in hash for one time pad cipher

one-time-pad key-reuse

asked yesterday SamG101 29

0

votes

0

answers

22

views

Could this Method be Used to Create a highly Compressed Alternative to Merkle Proofs?

hash hash-tree

asked yesterday mczarnek 33

2

votes

1

answer

637

views

How Should Fortuna and Yarrow Compare When Tested With Dieharder

random-number-generator randomness pseudo-random-generator fortuna

modified yesterday Patriot 1,102

3

votes

1

answer

93

views

Does choosing N to be product of safe primes avoid William's p+1 factoring attack on RSA?

rsa factoring safe-prime

modified yesterday Patriot 1,102

22

votes

2

answers

919

views

Are safe primes $p=2^k \pm s$ with $s$ small less recommandable than others as a discrete log modulus?

discrete-logarithm prime-numbers safe-prime

modified yesterday Patriot 1,102

0

votes

1

answer

49

views

RSA vs Elliptic Curves

elliptic-curves

answered yesterday poncho 98.5k

-1

votes

1

answer

800

views

20 bytes random string hashed with unsalted bcrypt or scrypt?

hash passwords bcrypt scrypt

modified yesterday Patriot 1,102

0

votes

1

answer

198

views

Hardware optimized stream ciphers?

aes stream-cipher chacha optimization

modified yesterday Patriot 1,102

5

votes

0

answers

108

views

Why Salsa20 rotates columns vertically to optimize for SIMD?

chacha salsa20 optimization

modified yesterday Patriot 1,102

0

votes

1

answer

117

views

Meet-in-the-middle probability of success

block-cipher meet-in-the-middle-attack probability

modified yesterday Community♦ 1

1

vote

0

answers

1k

views

RSA and One-time Password (OTP) service

rsa one-time-password

modified yesterday kelalaka 9,780

4

votes

1

answer

329

views

Ed25519 cryptanalysis and backdoor?

ed25519 backdoors

modified yesterday Patriot 1,102

0

votes

1

answer

162

views

Would a pictographic, phoneme-based, hand cipher be difficult to crack with computer crypt-analysis?

encryption

modified yesterday Patriot 1,102

1

vote

1

answer

153

views

Does the transposition cipher have a network application?

modified 2 days ago Patriot 1,102

1

vote

0

answers

27

views

Unicity Distance of the Merkle-Hellman Knapsack Cryptosystem with Hidden Public Key

ciphertext-only-attack knapsack unicity-distance

modified 2 days ago Patriot 1,102

19

votes

6

answers

3k

views

Why are PRNG in programming languages not cryptographically secure by default?

random-number-generator

modified 2 days ago Patriot 1,102

2

votes

2

answers

78

views

Any benefit to encrypting IV and MAC in a mode like AES-GCM or ChaChaPoly?

aes mac authenticated-encryption gcm

answered 2 days ago Richie Frame 10.5k

0

votes

1

answer

68

views

Proving the CCA-insecurity of El Gamal encryption scheme

elgamal-encryption chosen-ciphertext-attack

modified 2 days ago Omar Renawi 3

3

votes

0

answers

39

views

Hash multiset to point on elliptic curve where $A = 0$

hash elliptic-curves collision-resistance encoding birthday-attack

modified 2 days ago kelalaka 9,780

0

votes

0

answers

21

views

What text encoding scheme is this? [on hold]

encoding

asked 2 days ago user1893381 1

5

votes

2

answers

978

views

Can you help me understand Format Preserving Encryption?

encryption format-preserving

modified 2 days ago Patriot 1,102

5

votes

1

answer

122

views

Using nested signatures to trust public key of inner signatures

public-key signature authentication trust

modified 2 days ago Patriot 1,102

2

votes

2

answers

72

views

Attack on security model for RSA-FDH

rsa signature chosen-plaintext-attack chosen-ciphertext-attack rsa-pss

answered 2 days ago Josiah 734

0

votes

1

answer

67

views

Learning elliptic curve cryptography for specific application

elliptic-curves

answered 2 days ago Iñaki Viggers 148

4

votes

1

answer

125

views

Noise of ciphertexts in LWE/RLWE based FHE

homomorphic-encryption lattice-crypto

modified 2 days ago Community♦ 1

20

votes

3

answers

2k

views

Proving knowledge of a preimage of a hash without disclosing it?

hash zero-knowledge-proofs

modified 2 days ago real-or-random 126

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.