Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

4 votes
1 answer
1k views

is TLS compression used in modern browsers?

2 votes
2 answers
1k views

What is meant by software and hardware implementations of cryptograpic schemes? How to do it?

2 votes
3 answers
485 views

Check if encrypted text is equal without decrypting or doing heavy calculation - AES

4 votes
1 answer
1k views

Why do Mersenne Twister use Mersenne prime but not regular prime numbers

5 votes
1 answer
494 views

Why do Ed25519 use Twisted Edwards curve but not regular Edwards curve

1 vote
1 answer
750 views

Extracting a secret from a SHA-1 hashing algorithm

3 votes
3 answers
224 views

State of the art for Graph Isomorphism

1 vote
2 answers
193 views

PAGE 2: Can I move elements from cyclic subgroup to its cyclic parent group?

1 vote
2 answers
213 views

Is there still a place for obfuscation (secret algorithms) in encryption?

3 votes
1 answer
176 views

LPN Encryption Homomorphism

0 votes
2 answers
127 views

From Entropy's perspective how Encryption affects a Message?

1 vote
1 answer
178 views

symmetric key generation - random number vs pbkdf2

5 votes
1 answer
131 views

Conformance of Windows Random Number Generator (SP800-90A) with Key Lifecycle Security Requirements of the BSI

2 votes
2 answers
160 views

A question about "attacks on MAC key space"

0 votes
1 answer
96 views

Is there a counterpart of /dev/random and /dev/urandom in Windows NT systems?

0 votes
1 answer
144 views

Why hash algorithms have many different digest size variants?

2 votes
1 answer
107 views

Statistics-heavy crypto papers

2 votes
2 answers
115 views

Perfect Secrecy other than One-time Pad

1 vote
1 answer
138 views

What is the inverse of this generalised automaton (based on bitwise XOR and modular addition)?

0 votes
1 answer
134 views

Is there any cheaper way for multiplying a plaintext scalar to a vector?

2 votes
1 answer
132 views

Does using a block cipher in CBC mode *twice* result in an all-or-nothing transform (AONT)?

1 vote
1 answer
167 views

How to determine the prefix of a SECP256K1 compressed public key

1 vote
1 answer
119 views

Deriving of the y-coordinate on secp256k1 elliptic curve

0 votes
1 answer
71 views

using XOR as a hash function

6 votes
0 answers
191 views

Who originally generated the elliptic curve now known as P256/secp256r1

5 votes
1 answer
110 views

Cryptanalysis of the GOC

1 vote
1 answer
172 views

Can I move elements from cyclic subgroup to its cyclic parent group?

1 vote
1 answer
104 views

A RSA crypto CTF chanllenge with known private key ,cipher text and modules factor n

2 votes
1 answer
129 views

48-bit nonce reuse with ChaCha20

-1 votes
1 answer
126 views

How to convert the results of point doubling (Rx1 and Ry1) to point addition (Rx2 and Ry2) without knowledge of Qx and Qy

3 votes
2 answers
76 views

Decrypting McEliece if security assumptions fail

1 vote
2 answers
74 views

Deriveing y-coordinate

1 vote
2 answers
93 views

MAC from PRF secure under different restriction

-1 votes
2 answers
110 views

Encrypt with private key decrypt with public key

1 vote
1 answer
101 views

RSA: in $E(x) \equiv x^e \pmod N$, do we apply the mod function to $x^e$?

2 votes
1 answer
100 views

SHAKE256 XOF: Absorb incrementally vs all at once

2 votes
2 answers
127 views

Textbook RSA using multiple low public exponent e

2 votes
1 answer
72 views

$\epsilon$ parameter choice in lattice-based schemes

2 votes
1 answer
72 views

Computing the intersection of two lattices

7 votes
0 answers
90 views

Who invented salt, and why is it called salt?

1 vote
1 answer
69 views

Convert multiplication in $GF(2^{128})$ to bitwise AND?

1 vote
1 answer
88 views

Can this algorithm be called a RNG?

2 votes
1 answer
85 views

Good S-boxes from ARX designs

1 vote
1 answer
85 views

Could Yao's Millionaires' problem be used as a problem of binary search?

0 votes
1 answer
66 views

Trying to understand the basic principle of RSA from Wikipedia

1 vote
1 answer
50 views

DDT for boolean functions must contain only powers of two

1 vote
2 answers
80 views

Efficiently detect that a ciphertext is meant for Alice

1 vote
1 answer
99 views

Manual entropy collection from sources with an arbitrary base


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.