Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

72 votes
1 answer
41k views

How easy is it in 2022 to find a SHA1 collision?

14 votes
2 answers
4k views

Provably fair card deck used by client and server

2 votes
3 answers
1k views

Doing OTP two or more times with a biased TRNG: Will this have the same security as if was done with a non-biased TRNG?

6 votes
2 answers
3k views

EC Public key encryption scheme where Alice does not know Bob's public key

8 votes
2 answers
2k views

On what Galois field AES really works?

4 votes
2 answers
1k views

Are there prime numbers that are easy to modulo within 40 bits to 60 bits?

4 votes
3 answers
625 views

Do you know protocols, where it is necessary to obtain several "independent" points on the same elliptic curve?

2 votes
3 answers
539 views

NIST vs ISO Encryption standardisation process

2 votes
3 answers
191 views

What does $(a+b) \bmod{256}$ and $a$ XOR $b$ reveal about $a, b$?

1 vote
3 answers
221 views

is RSA KTS-OAEP necessary? [duplicate]

2 votes
1 answer
263 views

Security of equal discrete logs (over different bases)

1 vote
2 answers
153 views

Using ElGamal instead of RSA in FDH

-3 votes
1 answer
240 views

What's the deal with Belgian cryptographers? [closed]

0 votes
3 answers
87 views

Symmetric encryption algorithm based on multiplication

2 votes
2 answers
153 views

Understanding the "rewinding argument"

3 votes
1 answer
301 views

Is it theoretically possible to delegate public key generation?

2 votes
1 answer
206 views

Questions on "A CERTIFIED DIGITAL SIGNATURE" Pg. 19

1 vote
1 answer
242 views

Is the combination of X25519 ECDH and NTRU in OpenSSH 9.X secure against quantum attacks?

1 vote
3 answers
145 views

How can you verify private key ownership using a public key and message signature?

2 votes
1 answer
250 views

What is an output symbol?

3 votes
3 answers
113 views

Public-key/asymmetric encryption where you can only leak the decrypted message by leaking your password

1 vote
3 answers
79 views

Understanding public key in certificate precisely

1 vote
2 answers
130 views

Proving that a protocol is not attackable

1 vote
1 answer
164 views

Models and assumptions in the post quantum world

4 votes
2 answers
153 views

Cryptography based on #P-complete problems

1 vote
1 answer
86 views

Would encrypting a message twice with RSA with different keys be more secure that once?

1 vote
2 answers
76 views

Example of bad basis for lattices (worst-case for LLL)

2 votes
1 answer
91 views

Curve448 - Can Ed448 key material be reused for X448?

2 votes
2 answers
140 views

Secretly compute multiplication of two numbers owned by two people

2 votes
1 answer
107 views

Modular Reduction in the Ring $\mathbb{Z}_{q}[x]/(x^n + 1)$

3 votes
1 answer
106 views

Strauss-Shamir trick on EC multiplication by scalar

1 vote
1 answer
102 views

Approximate size of image of SHA512

3 votes
1 answer
100 views

What is the most viable and common hardware for public key cryptography implementation?

-1 votes
2 answers
59 views

predict random keys using python [closed]

1 vote
2 answers
123 views

Is there a winning strategy based on this coin-flipping protocol?

2 votes
1 answer
89 views

How less secure were those random bytes?

1 vote
2 answers
108 views

Digital signature forgery

1 vote
1 answer
108 views

Comparison of Post Quantum Algorithms in Nist 3rd round

3 votes
1 answer
99 views

ElGamal discrete logarithm method to send keys

2 votes
1 answer
99 views

For any numbers $a, b$, what are the operators $X, Y$ such that revealing $a\ X\ b$ and $a\ Y\ b$ doesn't reveal info about $a,b$?

2 votes
1 answer
72 views

Lamport Diffie One-time Signature

1 vote
1 answer
90 views

Proving negligible function

0 votes
2 answers
114 views

What does it mean if two files created by the same person shares the same SHA256 hash?

1 vote
1 answer
67 views

Tree Parity Machines (neural cryptography) advantages

0 votes
3 answers
52 views

Generalizing AES s-box circular shifts in bigger GF

2 votes
1 answer
64 views

Is this half-smart way of verifying EdDSA signature secure?

0 votes
1 answer
97 views

non-reversible additive cryptographic hash algorithm

0 votes
1 answer
73 views

Is this AES GCM + asymmetric schema secure?


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.