Skip to main content

Top Questions

2 votes
1 answer
79 views

How does a ring affect an inverse rotor?

1 vote
1 answer
30 views

Low-Collision Abbreviation For Public Key Hex Representation

0 votes
0 answers
18 views

Not able to reproduce the security estimates in Kyber through leaky-LWE-estimator

4 votes
3 answers
574 views

Compute OTP key if set of plain texts and its set of cipher texts are known

2 votes
2 answers
6k views

What is the importance of adding round key in AES

0 votes
0 answers
22 views

Homomorphic Max For Two Distances

4 votes
1 answer
140 views

Enhanced Miller Rabin outcome for composite numbers

2 votes
1 answer
407 views

How wrong is NIST 800-89's Partial Public Key Validation for RSA step e?

1 vote
1 answer
110 views

fastest prime number check formulae available

2 votes
0 answers
37 views

Is the quality of hash function essential in HKDF?

4 votes
4 answers
3k views

Is the XOR of hashes a good hash function?

12 votes
3 answers
743 views

Are there reasonably secure online voting implementations e.g. for student council elections?

3 votes
2 answers
439 views

The advantages of using KEM compared to applying traditional PKE approach

4 votes
0 answers
82 views
+50

Most simple transport encryption for link-constrained environments

2 votes
2 answers
3k views

Can I update SHA-256 digest chunk-wise instead of the whole array at once?

1 vote
1 answer
59 views

Key size for One Time Pad use with QKD

1 vote
2 answers
193 views

Why using q = (p - 1)/2 for discrete log Diffie-Hellman scalar operations and not p?

3 votes
1 answer
697 views

KEA assumption details

2 votes
1 answer
108 views

Poly-commitment based on Bulletproofs

2 votes
1 answer
64 views

Sensitivy Maximization RAPPOR (Local Differential Privacy)

5 votes
1 answer
64 views

Why does extractability not contradict zero-knowledge?

3 votes
1 answer
251 views

Key Encryption: Does it need to be Authenticated?

0 votes
2 answers
211 views

efficient way to break substitution cipher based on frequency attack

2 votes
1 answer
57 views

Does subsampling amplify privacy budget of differentially private median function

2 votes
1 answer
131 views

Can we use Super-Elliptic or Supersingular Elliptic Curves in Cryptography?

1 vote
1 answer
574 views

Best way to encrypt sensitive data on server with HSM and symmetric keys

0 votes
0 answers
25 views

How to remap right shift to backslash in Ubuntu 24.04? [closed]

3 votes
2 answers
779 views

How do cache-timing attacks determine the secret keys of encryption algorithms?

0 votes
0 answers
21 views

Can Index of Coincidence be used for ciphertext containing letters, numbers, and symbols? (All characters in cipher are from ASCII table)

7 votes
3 answers
1k views

New causes of side channel

2 votes
1 answer
548 views

How Secure Is Splitting A Bitcoin Private Key?

0 votes
0 answers
28 views

Is correctness condition of ABE scheme of [BGG+'Eurocrypt2014] right?

0 votes
0 answers
36 views

Has anyone used Arkworks with Spartan?

3 votes
1 answer
244 views

Algorithm to solve SVP (shortest vector problem) using LLL reduction

-1 votes
0 answers
36 views

Password Manager: Sending stored passwords in API response [closed]

0 votes
1 answer
117 views

Proving anonymous credential presentation

3 votes
0 answers
85 views

A highly space-efficient embedding of prime factorization problem using the Ising model

-1 votes
1 answer
67 views

Is MOV attack against ECDLP fundamentally impossible?

2 votes
1 answer
193 views

Parameters needed for Chaum-Pedersen Protocol

2 votes
0 answers
44 views

3-Coloring Zero-Knowledge Proof: rational verifier?

1 vote
1 answer
232 views

Figure out chosen-plaintext-attack in Zerologon attack

2 votes
0 answers
27 views

Relation between spectral norm and Euclidean norm of a matrix in [BGG+'Eurocrypt2014]

1 vote
0 answers
37 views

Given powers of tau ; the veryfying and the proving key, how can I find the point [f] resulting from the trusted setup in Groth16?

2 votes
1 answer
69 views

Is AES-GCM safe if same key is used for both uplink and downlink, assuming last IV bit tells the direction

2 votes
1 answer
121 views

Is it possible to use abstract groups to generalize DSA, ECDSA and EdDSA signature creation and verification?

1 vote
1 answer
65 views

Definition of "verification"?

-2 votes
0 answers
59 views

Project: We're looking for a security / privacy expert to fortify an AI chat application [closed]

5 votes
2 answers
799 views

Can Curve25519 shared secret be safely truncated to half its size?


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.