Hottest Questions This Month

25

votes

5

answers

7k

views

Other than password hashes, are there other uses for non-reversible crypto

hash one-way-function

modified Dec 7 at 7:47 AleksanderRas 1,592

6

votes

6

answers

11k

views

Can a large file be hashed down to 32 bytes, and then reconstructed from the hash? [closed]

hash compression

answered Nov 23 at 2:01 mckenzm 149

25

votes

2

answers

2k

views

Why did TLS 1.3 prohibit PGP authentication?

tls pgp standards

answered Nov 14 at 14:48 tialaramex 231

14

votes

1

answer

3k

views

What are the consequences of removing a single byte from a sha256 hash?

hash collision-resistance sha-256 preimage-resistance

modified Nov 30 at 19:53 dkaeae 378

6

votes

3

answers

1k

views

Is it possible to find the key for AES ECB if I have a list of plaintext and corresponding ciphertext?

aes attack known-plaintext-attack ecb

modified Nov 12 at 14:46 ymbirtt 173

9

votes

5

answers

2k

views

How to use proof of lack of knowledge?

protocol-design

modified Dec 1 at 18:04 SEJPM♦ 27.9k

9

votes

3

answers

2k

views

Re-encrypting a message and proving that the message has not changed

encryption homomorphic-encryption zero-knowledge-proofs

modified Nov 19 at 19:37 kelalaka 4,534

8

votes

4

answers

770

views

Why is SHA-512 limited to an input of $2^{128}$ bits?

hash sha-512

modified 10 hours ago kelalaka 4,534

2

votes

2

answers

1k

views

Is this test result sufficient to steer clear from this RNG for cryptographic applications?

pseudo-random-generator

modified Nov 14 at 23:04 fgrieu 77.2k

3

votes

1

answer

715

views

Is RSA provably secure in the sense of Douglas Stinson's ``provable security''?

rsa provable-security

answered 2 days ago Geoffroy Couteau 7,755

3

votes

2

answers

629

views

Is RSA inspired by Diffie Hellman?

rsa diffie-hellman history

answered Nov 19 at 22:43 kodlu 8,286

2

votes

3

answers

625

views

Input limitations on the RC6 cipher

encryption rsa rc6

modified Nov 22 at 7:24 forest 2,447

6

votes

2

answers

279

views

Do standalone Oblivious Transfer (OT) Protocols exist?

public-key key-exchange oblivious-transfer

answered Nov 14 at 9:21 kiwidrew 373

5

votes

3

answers

267

views

Need a test suite for my RSA implementation

rsa test-vectors

answered Nov 12 at 22:22 Gilles 7,477

4

votes

1

answer

434

views

Is there a way of maintaining malleability in a homomorphic encryption system while making it infeasible to perform chosen ciphertext attacks?

homomorphic-encryption provable-security chosen-ciphertext-attack malleability

modified Nov 26 at 22:19 Mikero 5,292

5

votes

2

answers

422

views

What is the best way to sign a message using RSA?

rsa

modified Nov 28 at 16:05 Maarten Bodewes 52.1k

2

votes

3

answers

113

views

Changing SHA-1 constants an functions: Does it affect security?

sha-1

answered Nov 14 at 18:53 Abdulahi 75

6

votes

4

answers

149

views

Can you explain what an NP statement is when they refer to it in Zero knowledge proofs?

zero-knowledge-proofs complexity

modified Dec 6 at 5:48 tatepairing 33

10

votes

1

answer

141

views

How does the process of creating a new secure Elliptic Curve look like?

public-key elliptic-curves tls ed25519 x25519

modified Dec 7 at 21:32 b degnan 1,349

3

votes

2

answers

323

views

How much extra security does key wrapping provide?

keys key-wrap

answered Nov 20 at 19:54 Luis Casillas 9,387

7

votes

1

answer

298

views

Who said “32 round Rijndael” in the third AES Conference

aes rijndael history

modified Nov 13 at 15:21 fgrieu 77.2k

1

vote

3

answers

113

views

What is the largest key size that could be carried by a shuffled deck of playing cards?

key-size pen-and-paper

answered 17 hours ago fgrieu 77.2k

2

votes

1

answer

233

views

What are the curly brackets in this cryptographic hash function definition?

notation

modified 2 days ago Paul Berg 129

4

votes

2

answers

120

views

What problems might you encounter if you use a block size much greater than AES?

aes

modified Dec 4 at 11:04 hardyrama 682

2

votes

1

answer

253

views

SSL - encrypt with private key and then with public key?

public-key tls openssl

modified 2 days ago Ella Rose 14.6k

3

votes

2

answers

142

views

Does AES encrypt /dev/null and feed output to AES again increase entropy of the ciphertext?

aes randomness entropy

modified Dec 3 at 3:27 Paul Uszak 6,858

5

votes

1

answer

219

views

RSA PSS security advantage

rsa signature salt digital

modified Dec 3 at 12:08 fgrieu 77.2k

3

votes

1

answer

132

views

Crypto-shredding a file by erasing the IV instead of erasing the Key

initialization-vector

modified Nov 26 at 7:11 Joran Greef 137

4

votes

2

answers

192

views

If you wrote a reversible SHA-256 algorithm, how many “metadata” bits would be required for reversability?

cryptanalysis sha-256 preimage-resistance

modified Nov 28 at 23:09 e-sushi♦ 13.5k

2

votes

1

answer

287

views

Security of AES after key expansion 4-MB with ECB and CBC

encryption aes symmetric cbc ecb

modified Nov 27 at 13:40 Maarten Bodewes 52.1k

2

votes

3

answers

115

views

BouncyCastle style ThreadedSeedGenerator

entropy

modified 2 days ago fgrieu 77.2k

1

vote

2

answers

112

views

Formal Proof of Shamir's Secret Sharing Scheme Security

modified Nov 17 at 14:26 Glorfindel 233

5

votes

1

answer

84

views

Intersection of two elliptic curves

elliptic-curves

answered Nov 14 at 6:47 Mehdi Tibouchi 992

3

votes

1

answer

175

views

Stronger security definition of PRG

pseudo-random-generator

modified Dec 3 at 17:03 fgrieu 77.2k

10

votes

1

answer

169

views

Why was Davies–Meyer chosen over Miyaguchi–Preneel most of the time?

hash merkle-damgaard compression-function miyaguchi-preneel

modified Nov 20 at 20:04 fgrieu 77.2k

7

votes

1

answer

74

views

WOTS+: Why does it XOR before running data through the hash function?

implementation post-quantum-cryptography

modified yesterday Mikero 5,292

3

votes

3

answers

113

views

Is it correct to concatenate (pseudo-)random byte values before testing them with the NIST suite or tools like dieharder?

randomness nist statistical-test

modified Nov 17 at 8:59 fgrieu 77.2k

2

votes

2

answers

78

views

Homomorphic properties of Paillier

encryption homomorphic-encryption paillier

modified Nov 15 at 7:00 fgrieu 77.2k

5

votes

2

answers

162

views

Why does the CBC-MAC require PRFs?

mac pseudo-random-function cbc-mac

answered Nov 14 at 15:39 Maeher 3,162

4

votes

1

answer

97

views

Minimum distance between polynomials in ring-LWE

lattice-crypto lwe ring-lwe

modified Nov 24 at 22:21 Ella Rose 14.6k

1

vote

2

answers

71

views

Is it possible to test 15-bit PRNG with the library TestU01?

random-number-generator statistical-test

modified Nov 18 at 18:30 fgrieu 77.2k

-1

votes

3

answers

117

views

In modular arithmetic, why is $\left(g^{k_1} \bmod n\right)^{k_2} \bmod n = \left(g^{k_1}\right)^{k_2} \bmod n$? [closed]

modular-arithmetic

modified Nov 15 at 19:21 fgrieu 77.2k

3

votes

1

answer

116

views

Performing a dictionary attack on RSA/ECB with no padding

encryption rsa public-key ecb dictionary-attack

modified Dec 3 at 18:35 fgrieu 77.2k

0

votes

2

answers

134

views

Are Zero Knowledge Proofs Quantum Resistant?

zero-knowledge-proofs post-quantum-cryptography quantum-resistance post-quantum

modified Nov 16 at 22:51 Shan Chen 1,120

3

votes

2

answers

134

views

What does the term “nontrivial rotation” mean?

terminology

modified Nov 21 at 19:20 SEJPM♦ 27.9k

2

votes

1

answer

104

views

Cryptography Pseudo Random Generator example question - proof

pseudo-random-generator pseudo-random-function

modified Dec 3 at 6:43 fgrieu 77.2k

3

votes

3

answers

80

views

Choosing asymmetric pairing for Elliptic Curves

elliptic-curves remote-data-checking

modified Nov 16 at 17:08 Bob Wall 324

3

votes

1

answer

95

views

Fiat-Shamir transform to Sigma protocols to turn to NIZK

zero-knowledge-proofs

modified Dec 5 at 21:56 kelalaka 4,534

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.