Hottest Questions This Month

15 votes

6 answers

6k views

Why do web-services tend to use preshared secret keys for client authentication instead of public keys?

JackW

236

modified Sep 13 at 21:48

2 votes

3 answers

1k views

Is there a security risk to use AES-CBC as stream cipher?

kelalaka

44.2k

modified Sep 12 at 9:41

8 votes

2 answers

1k views

Validating an RSA public key

fgrieu♦

126k

modified 11 hours ago

1 vote

1 answer

2k views

Should we really rely on "Cryptographically Secure Pseudo-Random Number Generators" (CSPRNG) alone to guarantee secure random output?

fgrieu♦

126k

modified Sep 6 at 12:49

5 votes

3 answers

464 views

When working in a subgroup of EC in EdDSA (especially Ed255190), how is it OK to use operations different from that of the main group?

kelalaka

44.2k

modified Sep 12 at 18:06

8 votes

1 answer

533 views

Does "SHA-256/192" use different initial values from SHA-256?

kelalaka

44.2k

modified Sep 13 at 20:23

4 votes

3 answers

160 views

Why is AES better than one-time pad?

Paul Uszak

14k

answered 12 hours ago

2 votes

1 answer

230 views

Find Ed25519 Y Coordinate from X Coordinate

J Medeiros

25

modified Sep 21 at 6:40

3 votes

1 answer

374 views

What asymmetric encryption to use that is safe against quantum computers?

kelalaka

44.2k

modified Sep 23 at 17:29

1 vote

3 answers

78 views

Are the structures (groups/rings) that RSA operations are performed on actually R-modules?

fgrieu♦

126k

modified Sep 19 at 2:47

2 votes

2 answers

117 views

Examples of systems using partially homomorphic schemes

fgrieu♦

126k

modified Aug 30 at 9:35

4 votes

2 answers

132 views

How to attest simultaneous knowledge of $2$ private keys?

Ievgeni

2,191

modified Sep 5 at 9:24

1 vote

3 answers

157 views

Base64 or hex to attach auth tokens to URL?

Dewi Morgan

146

answered Sep 2 at 0:05

1 vote

1 answer

145 views

Solving system of equation based on RSA

kelalaka

44.2k

modified Sep 6 at 9:35

3 votes

2 answers

111 views

Ed25519 - Is there a reason to not trust the signer - i.e. can there be a dishonest signer?

Wilson

353

answered Sep 13 at 16:00

0 votes

1 answer

84 views

Post quantum hybrid model and its security

poncho

134k

modified Sep 10 at 16:54

4 votes

1 answer

166 views

Why such a complicated way of cofactor clearing?

Sam Jaques

725

modified Sep 6 at 10:27

4 votes

1 answer

162 views

How are the unified addition formulae in extended twisted Edwards coordinates derived from the affine addition formulae?

kelalaka

44.2k

modified Sep 21 at 11:37

0 votes

1 answer

178 views

Is there some restrictions on values of p,q,d,e etc in RSA algorithm while trying to encrypt English Ciphertext?

fgrieu♦

126k

modified Sep 1 at 10:32

2 votes

0 answers

278 views

In RSA, are e and d technically equivalent? [duplicate]

fgrieu♦

126k

modified Sep 15 at 5:42

4 votes

1 answer

164 views

Is it true that Public keys with even y coordinate correspond to private key that are less than n/2 and vice versa? (Secp256k1)

kelalaka

44.2k

modified Sep 18 at 14:49

1 vote

2 answers

58 views

Debug bcrypt iterations with a static salt [closed]

Gilles 'SO- stop being evil'

17.1k

answered Sep 22 at 20:53

4 votes

2 answers

84 views

Randomized encodings and Indistinguishability obfuscation

James

191

modified Sep 6 at 0:25

0 votes

2 answers

65 views

Learning RSA: decryption yields inconsistent result after modular arithmetic

DannyNiu

7,103

modified Sep 2 at 1:01

1 vote

1 answer

107 views

Bactracking resistance PRNG - real world usage

Maarten Bodewes♦

86.5k

modified Sep 23 at 10:13

0 votes

2 answers

111 views

SHA256 - alternative algorithm to receive same hash?

fgrieu♦

126k

modified Sep 4 at 13:19

2 votes

2 answers

84 views

How is the edwards448 generator derived from the curve448 generator in RFC 7748?

Ruggero

6,499

modified Sep 9 at 7:32

1 vote

1 answer

84 views

Encryption and decryption for LWE

kelalaka

44.2k

modified Sep 21 at 8:32

0 votes

1 answer

65 views

Merkle–Damgård construction - the bigger input, the longer time to compute hash?

DannyNiu

7,103

modified Sep 5 at 5:53

2 votes

1 answer

102 views

How easy is it to know how many preimages an image might have, given that there's at least one (preimage, image) pair?

fgrieu♦

126k

modified Aug 31 at 14:46

2 votes

1 answer

97 views

In Ed25519, why not make both batch & unbatched verification follow the cofactored verification approach rather than unbatched using cofactorless?

user93353

1,801

modified Sep 15 at 11:38

0 votes

2 answers

95 views

How is AES256-GCM auth tag used in decryption

Maarten Bodewes♦

86.5k

answered Sep 1 at 23:16

1 vote

1 answer

121 views

Is it possible to design an algorithm that is based on the xor of the plaintext bits?

fgrieu♦

126k

modified Sep 6 at 5:03

2 votes

1 answer

72 views

Statistical Distance and Learning with Rounding

Samuel Neves

11.9k

modified Sep 4 at 16:47

2 votes

1 answer

54 views

Interactive Proofs: Why $\delta \lt \frac 13$ for Soundness & Completeness?

ckamath

4,568

modified Sep 23 at 20:30

-2 votes

2 answers

89 views

How to modify elliptic curve point?

poncho

134k

modified Sep 11 at 17:09

2 votes

1 answer

87 views

Create a control hash string from different sources, is there a difference, advantage or disadvantage in comparison when using this ways?

kelalaka

44.2k

answered Sep 2 at 17:19

2 votes

1 answer

67 views

How does this libgcrypt elgamal decryption work?

knaccc

3,807

modified Sep 23 at 23:15

2 votes

1 answer

106 views

+50

The significance of rewinding a simulation in an ZK interactive proof

knaccc

3,807

modified 2 days ago

0 votes

1 answer

61 views

Is MAC unnecessary for client side encryption?

bk2204

1,798

answered Sep 4 at 21:00

1 vote

1 answer

61 views

Symmetric MAC benefit

fgrieu♦

126k

modified Sep 1 at 19:46

2 votes

1 answer

70 views

what is IV predictable?

fgrieu♦

126k

modified 2 days ago

2 votes

1 answer

67 views

Clarification on expected number of plaintext, ciphertext pairs needed to identify AES keys

Daniel S

12k

answered Sep 19 at 18:30

1 vote

1 answer

86 views

"Near" Pseudorandom Function

Marc Ilunga

1,420

answered Sep 16 at 15:20

1 vote

1 answer

66 views

(In)security of multiplicative blinding / one-time-pad in a commutative ring

poncho

134k

answered Aug 29 at 13:42

1 vote

1 answer

83 views

HKDF-Expand max output length

Jon James

13

modified Sep 18 at 18:02

0 votes

1 answer

49 views

Is it insecure to make HMAC SHA1 message and corresponding hash public?

Maarten Bodewes♦

86.5k

answered Sep 1 at 22:52

1 vote

0 answers

102 views

Does this function yields to a PRF?

Invited

23

modified Aug 29 at 13:58

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.