Hottest Questions This Month

72 votes

1 answer

41k views

How easy is it in 2022 to find a SHA1 collision?

sha-1

Lery

7,163

modified Apr 25 at 12:28

14 votes

2 answers

4k views

Provably fair card deck used by client and server

hash

knaccc

2,513

modified May 3 at 17:56

2 votes

3 answers

1k views

Doing OTP two or more times with a biased TRNG: Will this have the same security as if was done with a non-biased TRNG?

one-time-pad trng

Paul Uszak

13.8k

answered May 11 at 7:09

6 votes

2 answers

3k views

EC Public key encryption scheme where Alice does not know Bob's public key

encryption public-key elliptic-curves

kelalaka

42.9k

modified Apr 21 at 18:58

8 votes

2 answers

2k views

On what Galois field AES really works?

aes finite-field

fgrieu♦

122k

modified yesterday

4 votes

2 answers

1k views

Are there prime numbers that are easy to modulo within 40 bits to 60 bits?

implementation prime-numbers

poncho

131k

modified May 3 at 18:09

4 votes

3 answers

625 views

Do you know protocols, where it is necessary to obtain several "independent" points on the same elliptic curve?

public-key elliptic-curves protocol-design protocol-analysis elliptic-curve-generation

K.G.

4,382

answered Apr 26 at 11:45

2 votes

3 answers

539 views

NIST vs ISO Encryption standardisation process

nist standards lightweight iso

Paul Uszak

13.8k

modified May 12 at 21:42

2 votes

3 answers

191 views

What does $(a+b) \bmod{256}$ and $a$ XOR $b$ reveal about $a, b$?

cryptanalysis entropy xor

Aman Grewal

1,326

modified Apr 28 at 23:48

1 vote

3 answers

221 views

is RSA KTS-OAEP necessary? [duplicate]

rsa oaep

Maarten Bodewes♦

84.5k

modified Apr 21 at 11:21

2 votes

1 answer

263 views

Security of equal discrete logs (over different bases)

discrete-logarithm reference-request

Daniel S

9,576

answered yesterday

1 vote

2 answers

153 views

Using ElGamal instead of RSA in FDH

elgamal-encryption elgamal-signature

fgrieu♦

122k

modified May 4 at 23:12

-3 votes

1 answer

240 views

What's the deal with Belgian cryptographers? [closed]

aes sha-3

fgrieu♦

122k

modified Apr 21 at 13:01

0 votes

3 answers

87 views

Symmetric encryption algorithm based on multiplication

symmetric cpu

b degnan

4,212

answered May 9 at 18:35

2 votes

2 answers

153 views

Understanding the "rewinding argument"

zero-knowledge-proofs

baro77

448

modified Apr 27 at 16:30

3 votes

1 answer

301 views

Is it theoretically possible to delegate public key generation?

public-key elliptic-curves dsa cryptocurrency

knaccc

2,513

modified Apr 23 at 0:56

2 votes

1 answer

206 views

Questions on "A CERTIFIED DIGITAL SIGNATURE" Pg. 19

encryption public-key hash-signature

Daniel S

9,576

answered May 7 at 23:17

1 vote

1 answer

242 views

Is the combination of X25519 ECDH and NTRU in OpenSSH 9.X secure against quantum attacks?

key-exchange post-quantum-cryptography ntru ssh x25519

forest♦

12.9k

modified Apr 19 at 4:04

1 vote

3 answers

145 views

How can you verify private key ownership using a public key and message signature?

public-key signature

fgrieu♦

122k

modified Apr 22 at 7:24

2 votes

1 answer

250 views

What is an output symbol?

stream-cipher pseudo-random-generator terminology

forest♦

12.9k

modified May 9 at 2:02

3 votes

3 answers

113 views

Public-key/asymmetric encryption where you can only leak the decrypted message by leaking your password

chausies

335

answered May 3 at 1:43

1 vote

3 answers

79 views

Understanding public key in certificate precisely

certificates

Maarten Bodewes♦

84.5k

modified yesterday

1 vote

2 answers

130 views

Proving that a protocol is not attackable

protocol-design

fgrieu♦

122k

modified May 9 at 5:08

1 vote

1 answer

164 views

Models and assumptions in the post quantum world

post-quantum-cryptography hardness-assumptions random-oracle-model

Maarten Bodewes♦

84.5k

modified Apr 26 at 12:14

4 votes

2 answers

153 views

Cryptography based on #P-complete problems

encryption complexity computational-complexity-theory

ckamath

4,463

modified yesterday

1 vote

1 answer

86 views

Would encrypting a message twice with RSA with different keys be more secure that once?

rsa

Maarten Bodewes♦

84.5k

modified May 3 at 22:06

1 vote

2 answers

76 views

Example of bad basis for lattices (worst-case for LLL)

lattice-crypto lenstra-lenstra-lovasz

Watson

141

modified May 12 at 19:54

2 votes

1 answer

91 views

Curve448 - Can Ed448 key material be reused for X448?

elliptic-curves key-exchange ed448

knaccc

2,513

modified May 6 at 17:54

2 votes

2 answers

140 views

Secretly compute multiplication of two numbers owned by two people

encryption multiparty-computation

Geoffroy Couteau

16.6k

modified Apr 30 at 11:39

2 votes

1 answer

107 views

Modular Reduction in the Ring $\mathbb{Z}_{q}[x]/(x^n + 1)$

modular-arithmetic

user15651

31

modified May 1 at 2:31

3 votes

1 answer

106 views

Strauss-Shamir trick on EC multiplication by scalar

elliptic-curves dsa

fgrieu♦

122k

modified May 10 at 10:00

1 vote

1 answer

102 views

Approximate size of image of SHA512

preimage-resistance sha-512

kelalaka

42.9k

modified Apr 25 at 22:01

3 votes

1 answer

100 views

What is the most viable and common hardware for public key cryptography implementation?

public-key implementation

Aman Grewal

1,326

modified Apr 20 at 18:15

-1 votes

2 answers

59 views

predict random keys using python [closed]

encryption cryptanalysis keys randomness

Polytropos

169

answered Apr 20 at 21:10

1 vote

2 answers

123 views

Is there a winning strategy based on this coin-flipping protocol?

protocol-design multiparty-computation commitments

Mikero

10.6k

modified May 11 at 17:20

2 votes

1 answer

89 views

How less secure were those random bytes?

random-number-generator

JAAAY

268

modified May 5 at 10:11

1 vote

2 answers

108 views

Digital signature forgery

signature

fgrieu♦

122k

modified Apr 29 at 15:29

1 vote

1 answer

108 views

Comparison of Post Quantum Algorithms in Nist 3rd round

post-quantum-cryptography nist

supinie

36

modified Apr 27 at 19:07

3 votes

1 answer

99 views

ElGamal discrete logarithm method to send keys

discrete-logarithm

fgrieu♦

122k

modified Apr 20 at 17:15

2 votes

1 answer

99 views

For any numbers $a, b$, what are the operators $X, Y$ such that revealing $a\ X\ b$ and $a\ Y\ b$ doesn't reveal info about $a,b$?

cryptanalysis entropy

kodlu

16.1k

modified Apr 30 at 21:09

2 votes

1 answer

72 views

Lamport Diffie One-time Signature

public-key signature hash-signature

poncho

131k

modified Apr 27 at 21:48

1 vote

1 answer

90 views

Proving negligible function

negligible

Maeher

6,412

answered May 9 at 11:23

0 votes

2 answers

114 views

What does it mean if two files created by the same person shares the same SHA256 hash?

sha-256

fgrieu♦

122k

modified Apr 18 at 7:52

1 vote

1 answer

67 views

Tree Parity Machines (neural cryptography) advantages

diffie-hellman key-exchange post-quantum-cryptography

fgrieu♦

122k

modified Apr 22 at 7:08

0 votes

3 answers

52 views

Generalizing AES s-box circular shifts in bigger GF

aes s-boxes

Tom

795

modified 5 hours ago

2 votes

1 answer

64 views

Is this half-smart way of verifying EdDSA signature secure?

implementation eddsa

Daniel S

9,576

modified May 7 at 23:57

0 votes

1 answer

97 views

non-reversible additive cryptographic hash algorithm

hash homomorphic-encryption collision-resistance

Amid Moeinzadeh

1

modified May 6 at 14:21

0 votes

1 answer

73 views

Is this AES GCM + asymmetric schema secure?

aes public-key ecies

SAI Peregrinus

4,937

answered May 11 at 14:24

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.