Hottest Questions Today

5

votes

2

answers

290

views

Hardware RNG Bias

random-number-generator entropy

answered 4 hours ago Paul Uszak 7,274

0

votes

1

answer

23

views

Encrypted Database

hash database

answered 8 mins ago kelalaka 7,735

0

votes

0

answers

21

views

A key-generator outputs an encrypted string that only changes the second half - what weaknesses could that expose?

cryptanalysis

modified 3 hours ago kelalaka 7,735

3

votes

2

answers

49

views

How to encrypt numeric data on a ticket

protocol-design authentication

answered 6 hours ago fgrieu 79.9k

1

vote

1

answer

21

views

Give a distinguisher to differentiate between PRP and RPO

pseudo-random-function pseudo-random-permutation

answered 8 hours ago Maeher 3,710

-2

votes

0

answers

19

views

Lattice based cryptography implementaion frameworks in python? [on hold]

lattice-crypto

asked 10 hours ago Jayanth_babu Ch 1

1

vote

0

answers

24

views

Complexity of arithmetic in (the integer ring of) a number field?

complexity arithmetic

asked 12 hours ago gen 123

0

votes

0

answers

17

views

The theory of transformation of arithmetic expressions into boolean circuits in zkboo

zero-knowledge-proofs

asked 12 hours ago PeterBocan 101

0

votes

1

answer

29

views

If nG and 2nG are known how to find generator point G

encryption

answered 9 hours ago Maeher 3,710

-1

votes

0

answers

21

views

What can you do with an Antminer D3 that's never been used? [on hold]

algorithm-design

asked 17 hours ago Ruaan Van Rooyen 1

4

votes

2

answers

92

views

Is it hypocritical to use AES-256 and RSA 2048 in the same application?

encryption rsa aes

answered yesterday Squeamish Ossifrage 16.6k

1

vote

0

answers

36

views

How does the user check whether $y < M$ without knowing all shares?

modified 11 hours ago subbu 83

5

votes

3

answers

170

views

Formal description of KDF1 and KDF2

key-exchange key-derivation standards

modified yesterday Maarten Bodewes♦ 54.7k

0

votes

0

answers

103

views

Is this the right way to implement a One-time Pad? [on hold]

hmac one-time-pad sha-3 sha-512

modified 16 hours ago Andrew Roberts 4

-1

votes

0

answers

22

views

What are some potential applications of trilinear mappings?

diffie-hellman group-theory

asked 22 hours ago Erwan Ounn 1

6

votes

4

answers

3k

views

One Time Pads and “Bit Flip” Attacks

one-time-pad

modified 2 days ago F1Linux 90

1

vote

1

answer

43

views

Algorithm for symmetric encryption (diffusion without confusion)?

encryption diffusion

modified yesterday Ella Rose♦ 16.2k

0

votes

0

answers

38

views

Is reverse engineering SHA256-HMAC function possible? [on hold]

hmac sha-256 brute-force-attack hotp

modified yesterday fgrieu 79.9k

2

votes

1

answer

35

views

Partial Known Message Pre-Image Attack on SHA-1

hash sha-1 preimage-resistance sat

modified yesterday kelalaka 7,735

6

votes

1

answer

366

views

Does Shannon perfect secrecy imply a deterministic encryption algorithm?

perfect-secrecy

answered 2 days ago poncho 92.1k

15

votes

9

answers

5k

views

Is one-time pad encryption vulnerable when near identical data is sent many times with different OTP?

one-time-pad

answered Feb 11 at 13:40 Christoph Burschka 111

2

votes

1

answer

61

views

Generating a key pair using a signature generated by an existing key

elliptic-curves signature algorithm-design key-derivation key-generation

modified yesterday fgrieu 79.9k

1

vote

1

answer

35

views

Repeated Vignère Cipher

encryption classical-cipher substitution-cipher

modified yesterday kelalaka 7,735

0

votes

1

answer

25

views

Caculating Correlation for CPA attack on AES

aes attack side-channel-attack hamming

answered yesterday Ruggero 4,278

-1

votes

1

answer

38

views

Length extension attack for file download

hash mac

answered yesterday DannyNiu 1,192

0

votes

0

answers

64

views

Yukel's Sieve - Factorization of Numbers into a Square Sieve

keys prime-numbers factoring

modified yesterday AleksanderRas 2,262

1

vote

0

answers

39

views

Reason for including the public key of the key agreement in the KDF

public-key elliptic-curves diffie-hellman key-exchange key-derivation

modified yesterday Maarten Bodewes♦ 54.7k

2

votes

1

answer

31

views

Extracting Zip using Only the AES Key

aes aes256

modified yesterday forest 3,980

1

vote

1

answer

62

views

Is a hashing algorithm considered broken if a collision happens under $2^{n/2}$?

hash collision-resistance

modified yesterday AleksanderRas 2,262

0

votes

0

answers

27

views

Chameleon hashes as encryption keys

encryption keys

modified yesterday AleksanderRas 2,262

0

votes

2

answers

51

views

Question about IV from CBC/AES-256

aes cbc initialization-vector aes256

answered yesterday R. C. W. 21

0

votes

1

answer

35

views

Burmester Desmedt Key agreement. Is the division a floating point one or an integer one

key-exchange

modified 2 days ago Dimitrios Desyllas 255

8

votes

1

answer

170

views

Does GCM (or GHASH) only provides 64-bit security against forgeries?

terminology security-definition

answered Feb 12 at 22:03 Shan Chen 1,480

0

votes

0

answers

35

views

Show that CPA-security implies security against plaintext recovery

provable-security chosen-plaintext-attack key-recovery

asked yesterday Javier 602

1

vote

1

answer

70

views

ChaCha with 64bit integers as a PRNG with streams

chacha

modified yesterday forest 3,980

1

vote

1

answer

28

views

Restricting output of key derivation function

key-derivation hkdf

modified 2 days ago Maarten Bodewes♦ 54.7k

0

votes

2

answers

60

views

Why does Laravel only support AES-256-CBC?

aes openssl aes256

answered 2 days ago Thomas Hupkens 111

2

votes

2

answers

105

views

Entropy of a random message chosen by an adversary from a subdomain

entropy

modified 2 days ago Future Security 1,867

-1

votes

1

answer

52

views

Equivalence of cryptographic problems

elliptic-curves diffie-hellman factoring

answered Feb 12 at 16:30 Geoffroy Couteau 8,290

2

votes

1

answer

46

views

Generating a small EDDSA curve

elliptic-curves signature elliptic-curve-generation

answered Feb 12 at 19:25 Adam Ierymenko 67

1

vote

0

answers

49

views

Explaining Berlekamp-Massey Algorithm in simple/layman term?

algorithm-design lfsr

modified Feb 12 at 19:52 Maarten Bodewes♦ 54.7k

2

votes

0

answers

42

views

Understanding LFSRs and Berlekamp-Massey Algorithm [on hold]

algorithm-design lfsr

modified Feb 12 at 20:00 kelalaka 7,735

3

votes

1

answer

49

views

SPHINCS and HORST: can we sign the same message twice?

hash-signature one-time-signature

answered Feb 11 at 18:33 poncho 92.1k

3

votes

1

answer

67

views

Golomb's Randomness postulates

randomness pseudo-random-generator statistical-test

modified Feb 12 at 4:48 kodlu 8,776

-2

votes

0

answers

42

views

Classical definitions of encryption and masking

encryption terminology pen-and-paper

modified Feb 12 at 17:44 Maarten Bodewes♦ 54.7k

3

votes

1

answer

57

views

In NIST modulus and key size recommendations is `group` equivalent to modulus and `key` equivalent to exponent?

public-key diffie-hellman keys discrete-logarithm

modified Feb 12 at 7:11 fgrieu 79.9k

3

votes

1

answer

172

views

Can we estimate the loss of entropy when applying a N-bit hash function to and N-bit random input?

hash entropy

modified Feb 10 at 22:30 kodlu 8,776

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.