Hottest Questions This Month

5 votes

5 answers

1k views

Which hash algorithms support binary input of arbitrary bit length?

fgrieu♦

144k

modified Aug 31 at 14:24

9 votes

4 answers

1k views

What is the shortest viable hmac for non-critical applications?

Vilx-

1,207

modified yesterday

3 votes

3 answers

941 views

How can we know how good a TRNG is?

Paul Uszak

15.7k

modified Sep 8 at 6:33

3 votes

2 answers

371 views

Can data be preprocessed when using EdDSA with a hash (SHA or SHAKE)?

Maarten Bodewes♦

93.9k

modified Aug 22 at 17:06

3 votes

1 answer

345 views

Implementing SHAKE using SHA3

Jeremy Banks

855

modified Aug 26 at 18:22

5 votes

1 answer

399 views

In lattice, does converting a "bad" basis to a "good" basis constitute a hard problem?

Mahesh S R

1,094

modified Aug 28 at 4:04

2 votes

2 answers

476 views

Generating Carmichael numbers in polynomial time

Daniel S

25.4k

modified Aug 20 at 11:17

2 votes

2 answers

303 views

Why is the public key included in the private key in Kyber KEM?

Daniel S

25.4k

modified Sep 11 at 5:22

2 votes

1 answer

291 views

Libsodium: Why hiding the field arithmetics?

poncho

150k

modified Sep 5 at 14:02

3 votes

1 answer

261 views

Questions about LWE in NIST standards

Daniel S

25.4k

modified Sep 8 at 10:02

1 vote

3 answers

175 views

When to use UUID and when to use hash?

aiootp

1,116

modified Aug 20 at 11:46

4 votes

1 answer

248 views

Attacks exploiting decryption failures in KYBER

Daniel S

25.4k

answered 2 days ago

1 vote

2 answers

183 views

Is the product of two NONZERO elements independently drawn from a prime field uniformly distributed?

kodlu

23.1k

modified Sep 10 at 13:50

2 votes

1 answer

121 views

Kyber prime modulus p and base generator g

Daniel S

25.4k

answered Sep 6 at 16:33

0 votes

2 answers

56 views

virtual encryption vs non virtual? [closed]

Gilles 'SO- stop being evil'

20k

answered Aug 31 at 19:37

0 votes

1 answer

89 views

Reversing XOR operation

n-l-i

862

modified Aug 27 at 17:18

1 vote

1 answer

185 views

Small proofs for large sums

fgrieu♦

144k

modified Aug 28 at 15:53

1 vote

1 answer

173 views

When was EDH key exchange introduced to SSL/TLS?

crypt

2,492

answered Sep 4 at 6:48

3 votes

1 answer

127 views

Random Oracle in Fiat-Shamir Transform (from Katz-Lindell Textbook)

Maeher

7,038

answered Aug 23 at 8:11

3 votes

1 answer

127 views

Compare Saber and Kyber, about their techniques of message bit layout in encryption

Daniel S

25.4k

answered Sep 2 at 8:04

1 vote

1 answer

189 views

Preventing BEAST by using authorisation header instead of cookies

Sjoerd

696

answered Sep 9 at 10:58

2 votes

1 answer

112 views

How to find a polynomial with small coefficients that has a given root over a prime field?

Samuel Neves

12.8k

modified Aug 25 at 1:29

1 vote

1 answer

106 views

ECC with specific order - Proving cyclic or not

poncho

150k

modified Aug 16 at 18:04

3 votes

1 answer

86 views

Attack on Identification Scheme (from Katz-Lindell Textbook 3rd Ed., p. 483)

Daniel S

25.4k

modified Sep 11 at 7:53

1 vote

1 answer

77 views

Is it possible to use $a^x + b^x (\bmod p)$ and $a^{x+1} + b^{x+1} (\bmod p)$ to find $a^{x(p-1)/q} + b^{x(p-1)/q} (\bmod p)$, q is factor of p-1?

CommunityBot

1

modified Aug 23 at 10:58

2 votes

1 answer

76 views

Verifiable OPRF from general ZKP?

Geoffroy Couteau

20.8k

answered Sep 6 at 8:45

0 votes

1 answer

74 views

How is GF(2^n) multiplication optimized using only rotation and xor

fgrieu♦

144k

modified Sep 6 at 7:25

1 vote

2 answers

66 views

No inverse of $k^{-1}$ modulo $p-1$ in ElGamal signature scheme

Alex Them

340

modified Sep 2 at 12:22

0 votes

1 answer

65 views

Can an RSA 2048 public key be recovered from encrypted- and decrypted data?

Maarten Bodewes♦

93.9k

modified Aug 30 at 21:03

2 votes

1 answer

60 views

Centered Binomial Distribution vs Fixed Weight Ternary Sampler

Daniel S

25.4k

modified Aug 31 at 22:07

1 vote

1 answer

97 views

Device Fingerprinting

aiootp

1,116

modified Aug 29 at 16:12

0 votes

1 answer

58 views

Encrypting AES-GCM Key with AES or RSA?

Maarten Bodewes♦

93.9k

answered Sep 5 at 21:13

0 votes

2 answers

88 views

Derive Multiple Keys from password

Heeiiigou

3

modified Sep 3 at 10:52

2 votes

2 answers

67 views

Understanding Adversary's Advantage for Target Key Recovery in Ideal Cipher Model

Daniel S

25.4k

modified Aug 20 at 11:00

1 vote

1 answer

85 views

What exactly is a VRF?

CommunityBot

1

modified Aug 24 at 22:11

4 votes

1 answer

66 views

E2EE Group message encryption

David Balbás

36

answered Aug 29 at 15:22

2 votes

1 answer

66 views

Security analysis of using RSA-OAEP and RSA-PSS with the same key

fgrieu♦

144k

modified Sep 4 at 6:05

1 vote

1 answer

65 views

Using hash for data integrity and authenticity, how?

Gilles 'SO- stop being evil'

20k

answered Aug 31 at 19:59

1 vote

1 answer

83 views

A question about smoothing lemma and proof

Mark Schultz-Wu♦

13.8k

answered Sep 7 at 19:13

0 votes

1 answer

48 views

Double ratchet algorithm

aiootp

1,116

modified Sep 1 at 17:34

2 votes

1 answer

79 views

A solution to "force" sharing of plain text between two parties

Mahesh S R

1,094

modified Aug 23 at 6:35

0 votes

2 answers

77 views

Trustless, Two-Party Randomness - Preventing Bruteforcing

Mark Schultz-Wu♦

13.8k

modified Sep 8 at 18:03

3 votes

1 answer

57 views

Visibility of oracle queries in the Indifferentiability model

Samuel Neves

12.8k

answered Aug 27 at 16:17

1 vote

1 answer

72 views

How to proof that G is a PRG? [closed]

PeterRindal

73

modified Aug 19 at 7:02

1 vote

1 answer

42 views

What is the difference between public and private RSA keys? [duplicate]

poncho

150k

answered Sep 3 at 1:55

1 vote

1 answer

69 views

Why do non-prime order curves faciliate efficient computation? [closed]

user93353

2,262

answered Aug 17 at 2:43

1 vote

1 answer

67 views

How do non-Turing complete languages like Clarity support sha256 hashing, which internally relies on loops?

DannyNiu

9,672

answered Sep 11 at 13:49

2 votes

1 answer

40 views

How can the classic Index Calculus from Western and Miller be used in multplicative subgroups?

Daniel S

25.4k

answered Aug 31 at 22:32

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.