Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top
Cryptography

Top Questions

Ask Question
Active Hot Week Month
3 votes
1 answer
65 views

How much can we compress RSA public keys with two equal size factors?

Samuel Neves's user avatar
Samuel Neves
  • 12.4k
2 votes
1 answer
609 views

Ed25519 to X25519 transportation

kelalaka's user avatar
kelalaka
  • 47.5k
0 votes
0 answers
15 views

EC public key wiith leading zeros

madhurkant's user avatar
madhurkant
  • 1
1 vote
0 answers
26 views

2FA browser plugins are sufficiently secure - or not?

Jonathan Root's user avatar
Jonathan Root
  • 111
1 vote
1 answer
22 views

Question about the notation $H\leftarrow\mathcal{H}_{\mathcal{K}}$ in an IND-CCA security experiment

Marc Ilunga's user avatar
Marc Ilunga
  • 2,848
-3 votes
0 answers
24 views

Prove that F is a secure PRF [closed]

gigachad's user avatar
gigachad
  • 1
1 vote
0 answers
30 views

"crandall" - unsolved CTF challenge - ASIS-quals-2023

akonzu's user avatar
akonzu
  • 11
0 votes
2 answers
82 views

If it is proved that P=NP, what happens to crypto? [duplicate]

kodlu's user avatar
kodlu
  • 21.2k
0 votes
0 answers
15 views

Devops online certification course [closed]

stalin stephen's user avatar
stalin stephen
  • 1
-1 votes
0 answers
17 views

Are there any obvious vulnerabilities/flaws in my secure communications scheme, specifically in the way I use sequence numbers in messages? [closed]

user4574's user avatar
user4574
  • 131
2 votes
0 answers
78 views

Source of encryption scheme used in blockchain based IoT

Maarten Bodewes's user avatar
Maarten Bodewes♦
  • 91.7k
2 votes
3 answers
119 views

What's the name of the property of ideal cryptographic hash functions that effectively make it a random number generator?

Paul Uszak's user avatar
Paul Uszak
  • 15.1k
0 votes
0 answers
27 views

Proof of reputation on a subject

demo void gan's user avatar
demo void gan
  • 1
16 votes
3 answers
21k views

Has AES-128 been fully broken?

lamontap's user avatar
lamontap
  • 754
1 vote
0 answers
17 views

knowledge soundness in IVC paper

ohmygoddess's user avatar
ohmygoddess
  • 111
5 votes
2 answers
813 views

Weaker alternative to Ed25519?

xorhash's user avatar
xorhash
  • 729
1 vote
0 answers
59 views

Does ECC give the most secure assymetric cipher for a given public key size?

fgrieu's user avatar
fgrieu♦
  • 138k
0 votes
0 answers
18 views

Is ECC by far the most secure two-key cipher of equal key length? [duplicate]

槿铃兔's user avatar
槿铃兔
  • 11
0 votes
2 answers
64 views

How to prove that an algorithm is the time optimal algorithm for implementing a problem?

kodlu's user avatar
kodlu
  • 21.2k
2 votes
1 answer
78 views

Entropy extraction from a Zerner diode TRNG

Paul Uszak's user avatar
Paul Uszak
  • 15.1k
3 votes
1 answer
927 views

Why do we need additional secret value (k) in ECDSA?

fgrieu's user avatar
fgrieu♦
  • 138k
2 votes
1 answer
206 views

Elliptic Curve digital signature algorithm without "hashing to point"?

Community's user avatar
CommunityBot
  • 1
1 vote
1 answer
156 views

Cryptography to tackle deepfake, proving the photo is original

Community's user avatar
CommunityBot
  • 1
0 votes
0 answers
55 views

Distinguishing between two DDH-like tuples

Doron's user avatar
Doron
  • 79
4 votes
2 answers
108 views

Can blockchain be considered a cryptographic primitive?

Chunchi Liu's user avatar
Chunchi Liu
  • 63
0 votes
0 answers
22 views

What is the probability of accidentally getting a seed phrase that is associated with a real address with a balance in the bitcoin blockchain? [migrated]

LightTunnelEnd's user avatar
LightTunnelEnd
  • 169
1 vote
1 answer
52 views

Definition of Dual Lattice

user1035648's user avatar
user1035648
  • 363
0 votes
0 answers
38 views

Got a Cipher that I'm stuck on! [closed]

LuckyMageMan's user avatar
LuckyMageMan
  • 1
-2 votes
0 answers
32 views

In openssl, if I decrypt using a wrong password it just tells "bad decrypt" without showing the output. Is there a way to show it anyway? [closed]

Allexj's user avatar
Allexj
  • 139
0 votes
0 answers
29 views

Cryptanalysis of S-box [closed]

Vahid's user avatar
Vahid
  • 1
1 vote
1 answer
84 views

Is it safe to derive a Falcon512 key pair from a XOF output?

Maarten Bodewes's user avatar
Maarten Bodewes♦
  • 91.7k
1 vote
1 answer
167 views

Truncating ciphertext as encryption and to decrease bandwidth in code-based PKEs

Mike Hamburg's user avatar
Mike Hamburg
  • 26
0 votes
1 answer
43 views

which zero knowledge proof technique is suitable for identity verification system?

ming alex's user avatar
ming alex
  • 368
0 votes
0 answers
45 views

ElGamal signature scheme problem and unsure whether my calculations are wrong or that's the answer

fgrieu's user avatar
fgrieu♦
  • 138k
20 votes
3 answers
9k views

Pre-image resistant but not 2nd pre-image resistant?

SocraticMathTutor's user avatar
SocraticMathTutor
  • 11
2 votes
1 answer
262 views

Signature using RSA (as described in Cryptography engineering)

fgrieu's user avatar
fgrieu♦
  • 138k
3 votes
0 answers
356 views

Security of Full Domain Hash (or not quite full)

fgrieu's user avatar
fgrieu♦
  • 138k
1 vote
2 answers
224 views

Can I move elements from cyclic subgroup to its cyclic parent group?

Community's user avatar
CommunityBot
  • 1
0 votes
0 answers
108 views

Do "superfast" keyed hash functions exist?

SocraticMathTutor's user avatar
SocraticMathTutor
  • 11
0 votes
1 answer
101 views

NIST PQC: minimum number of digital signatures

Community's user avatar
CommunityBot
  • 1
2 votes
1 answer
223 views

Is there an algebra group (or ring) in which computing the inverse element is hard without some trapdoor information?

fgrieu's user avatar
fgrieu♦
  • 138k
5 votes
2 answers
1k views

Are curve secp256k1 ECDSA signatures distinguishable from random data?

fgrieu's user avatar
fgrieu♦
  • 138k
0 votes
0 answers
79 views

Textbook RSA on random numbers mod a smaller prime

Zarquan's user avatar
Zarquan
  • 313
1 vote
1 answer
85 views

Proving an identification-scheme based on a digital signature is secure

Community's user avatar
CommunityBot
  • 1
1 vote
1 answer
52 views

Division in Finite Rings of Order 2^ℓ

Community's user avatar
CommunityBot
  • 1
0 votes
1 answer
46 views

Is there an open source key-derivation service?

Alex Dawn's user avatar
Alex Dawn
  • 1
1 vote
1 answer
61 views

Sigma parameter from Trapdoors for Lattices

Community's user avatar
CommunityBot
  • 1
4 votes
1 answer
88 views

Robust CMAC-based key derivation function

Community's user avatar
CommunityBot
  • 1

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.