Hottest Questions This Month

11

votes

5

answers

4k

views

Could celestial objects be used in cryptography?

encryption

answered Aug 31 at 14:57 AnoE 248

14

votes

3

answers

2k

views

Why Quantum Key Distribution (QKD) is impractical

quantum-key-distribution

modified Sep 4 at 7:48 fgrieu♦ 116k

7

votes

2

answers

1k

views

Do I need to sanitize user input to scrypt, or to PBKDF's in general?

key-derivation pbkdf-2 scrypt

modified Sep 2 at 10:09 Peter Mortensen 143

6

votes

2

answers

2k

views

Encoding salt as hex before hashing bad practice?

hash keys

modified Sep 14 at 12:27 A Tea Kettle 79

2

votes

1

answer

1k

views

Is OTP still perfectly secure if we limit message and key space

one-time-pad perfect-secrecy

modified Sep 5 at 17:59 Jabermony 3

8

votes

2

answers

1k

views

Why cannot I assume that cryptography published in venues/journals handled by the same publishers as prestigious journals is serious?

reference-request

modified 5 hours ago ThePrince 195

8

votes

1

answer

914

views

How are curve names constructed?

elliptic-curves standards

modified Sep 8 at 12:57 fgrieu♦ 116k

11

votes

2

answers

507

views

RSA Private Exponent Generation according to FIPS 186-4 in openssl v1

rsa openssl fips-140

answered Sep 8 at 7:01 j.p. 1,444

6

votes

4

answers

433

views

A source of randomness that anyone can independently, conveniently and robustly access?

random-number-generator key-exchange randomness pseudo-random-generator verifiable-random-function

answered Aug 26 at 15:05 Grifball 129

1

vote

2

answers

969

views

What is a good and bulletproof private key for ECC curves?

public-key elliptic-curves

modified Sep 14 at 5:33 fgrieu♦ 116k

2

votes

1

answer

350

views

Format Preserving Hash Function

hash format-preserving

modified Aug 31 at 23:47 fgrieu♦ 116k

3

votes

2

answers

511

views

Does adding a known text to an input decrease hash security?

hash

modified Aug 28 at 1:37 Patriot 2,933

6

votes

1

answer

233

views

Introduce a reference for cryptanalysis of WhatsApp software

cryptanalysis reference-request signal-protocol

modified Sep 12 at 16:15 user3571 63

2

votes

1

answer

312

views

breaking RSA with linear padding using Hastads attack with e>=11

rsa attack

answered Sep 14 at 23:27 Samuel Neves 11.1k

2

votes

2

answers

174

views

FOR AES GCM decrypt function, Does the output(PT) depend on Tag value(T)?

aes decryption aes-gcm

modified Aug 25 at 14:55 Maarten Bodewes♦ 80.7k

1

vote

2

answers

261

views

Meet in the middle time complexity

des meet-in-the-middle-attack

modified 11 hours ago Yotam Sofer 13

6

votes

2

answers

117

views

Does Poly1305 have weak keys like GCM/GHASH?

group-theory poly1305

answered Sep 11 at 2:08 Myria 1,972

0

votes

3

answers

105

views

Asymmetric cryptosystems based on curves besides elliptic curves

public-key elliptic-curves

answered Sep 2 at 15:01 AVP82000 61

4

votes

1

answer

210

views

Indistinguishable Obfuscation vs Functional Encryption

functional-encryption io

modified Sep 2 at 15:16 Occams_Trimmer 4,233

1

vote

2

answers

146

views

Is the verification process in ECDSA the same or different from in RSA?

rsa signature dsa verifiability

modified Sep 17 at 6:51 Match Man 35

2

votes

1

answer

182

views

Poly1305 reuse of r

cryptanalysis finite-field poly1305

modified Sep 6 at 8:02 Fractalice 2,460

0

votes

2

answers

132

views

How difficult is it to break unknown encryption?

encryption

answered Aug 26 at 22:14 Gilles 'SO- stop being evil' 15.1k

2

votes

2

answers

204

views

Hashing until reaching zero

hash

modified Sep 2 at 6:14 fgrieu♦ 116k

2

votes

1

answer

71

views

Does grouping password characters for readability decrease entropy?

passwords randomness entropy

modified Sep 6 at 7:46 Marc 1,563

4

votes

1

answer

89

views

Why does Index Calculus work?

discrete-logarithm group-theory pki

modified Sep 3 at 14:49 fgrieu♦ 116k

2

votes

2

answers

142

views

A field element as the exponent of a group element

finite-field snarks

modified 2 days ago Peter Mortensen 143

3

votes

1

answer

145

views

Why check for point-at-infinity during ECDSA verification?

signature dsa

modified Sep 4 at 13:58 fgrieu♦ 116k

2

votes

1

answer

186

views

Barret reduction to get 64-bit remainder of a 128-bit number

modular-arithmetic

modified Sep 18 at 12:51 fgrieu♦ 116k

0

votes

3

answers

110

views

Are the shares of Shamir secret sharing uniformly distributed random numbers?

3

votes

1

answer

109

views

Are there different definitions of secure two-party computation?

provable-security multiparty-computation semantic-security indistinguishability

modified Aug 25 at 8:31 Distinguishable Llama 33

3

votes

2

answers

80

views

CBC mode with predictable IV ok if key is only used once?

cbc

modified Aug 30 at 16:23 fgrieu♦ 116k

1

vote

1

answer

127

views

Q about points on an ECC curve

elliptic-curves

answered Sep 16 at 6:06 Daniel S 4,595

0

votes

1

answer

94

views

RSA factorization knowing the form of p and q

rsa factoring

modified Aug 29 at 15:35 fgrieu♦ 116k

0

votes

1

answer

89

views

Is it Possible to Prevent/Mitigate Modern Encryption of Data by Using A Known Signal?

encryption

modified Aug 24 at 13:16 Catachan 11

1

vote

1

answer

89

views

How to find integer point of a ec curve in a given range?

public-key elliptic-curves discrete-logarithm finite-field group-theory

modified Sep 16 at 21:24 Match Man 35

3

votes

0

answers

182

views

Uniqueness and Schnorr signatures

hash signature discrete-logarithm sha-256 schnorr-signature

modified Aug 28 at 20:15 south_lagoon 31

6

votes

1

answer

65

views

CSIDH - l ideal generators

elliptic-curves post-quantum-cryptography isogeny

answered Sep 6 at 10:56 Luca De Feo 823

3

votes

1

answer

105

views

Is it safe to reveal an arbitrary EC point multiplied by a secret key?

elliptic-curves diffie-hellman

modified Sep 17 at 14:42 Mehdi Tibouchi 1,158

4

votes

1

answer

95

views

Distinguishers and next bit predictors without the uniform distribution

protocol-analysis distinguisher indistinguishability

answered Sep 12 at 10:07 kodlu 14.8k

3

votes

0

answers

156

views

What is an efficient cryptographic hash function in the λ-calculus?

hash

modified Sep 13 at 16:02 MaiaVictor 1,255

1

vote

1

answer

72

views

Do we need to consider overflow in paillier encryption?

paillier

answered Aug 26 at 8:06 Geoffroy Couteau 15.5k

-2

votes

1

answer

72

views

Encrypt private key and decrypt with the public key

encryption rsa decryption

answered Sep 9 at 8:51 A. Hersean 771

3

votes

1

answer

71

views

Functional and security model for SEAL

homomorphic-encryption ring-lwe

answered Sep 15 at 19:02 Mark 5,996

2

votes

1

answer

70

views

Why the trace of the Elliptic curve should be positive?

elliptic-curves

answered Sep 4 at 16:03 Fractalice 2,460

3

votes

1

answer

68

views

Strong Diffie Hellman in bilinear groups

diffie-hellman hardness-assumptions trapdoor accumulators bilinear-pairing

modified Sep 14 at 0:33 Mathdropout 176

1

vote

1

answer

67

views

The significance of the field of the factor in Lenstra’s ECM

elliptic-curves prime-numbers factoring

modified Sep 17 at 5:43 fgrieu♦ 116k

0

votes

1

answer

51

views

Setting AES Sbox output to 0

encryption

modified Sep 11 at 15:01 Daniel S 4,595

0

votes

1

answer

107

views

What is the easiest encryption/cipher to brute force?

encryption cryptanalysis block-cipher unicity-distance

answered Aug 25 at 19:34 poncho 124k

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.