Hottest Questions This Month

10

votes

4

answers

1k

views

Disadvantages of AES-CTR?

aes ctr

modified Oct 16 at 15:20 kelalaka 23.5k

7

votes

3

answers

1k

views

What should the nonce value be for client-side encryption?

modified Oct 13 at 12:36 Peteris 206

7

votes

1

answer

1k

views

Public key decryption?

encryption public-key signature

modified Oct 1 at 11:29 DannyNiu 3,777

7

votes

3

answers

1k

views

Will cryptanalysis always stay a relevant topic?

cryptanalysis

modified Oct 6 at 8:33 SEJPM♦ 40.4k

12

votes

1

answer

1k

views

What the X stands for in the front of Elliptic curve names like X25519

elliptic-curves standards notation

modified Oct 9 at 16:06 kelalaka 23.5k

1

vote

2

answers

529

views

Converting normal alphabets to 64 bit plain text

des

modified 17 hours ago Maarten Bodewes♦ 74.1k

6

votes

2

answers

781

views

Need help understanding math behind Rijndael S-Box

aes finite-field rijndael

modified 2 days ago kelalaka 23.5k

4

votes

4

answers

884

views

Could a fixed RSA encryption be used instead of a salt to prevent rainbow table attacks?

hash rsa pseudo-random-function password-hashing salt

modified Oct 4 at 21:06 kelalaka 23.5k

1

vote

1

answer

768

views

How to generate the exact AES key in both client and server side?

encryption symmetric key-exchange

modified Oct 5 at 9:36 Marc 1,293

3

votes

3

answers

545

views

Theoretical notion of white-box

white-box

modified Oct 8 at 20:55 fgrieu♦ 106k

14

votes

1

answer

1k

views

What issues are there while using Linux's /dev/urandom for generating cryptographic keys?

random-number-generator trng

modified Oct 19 at 7:52 A. Hersean 544

5

votes

2

answers

140

views

Why use prime number $q$ such $q$| $(p-1)$ in discrete logarithm based schemes?

discrete-logarithm finite-field group-theory

modified Oct 6 at 19:45 Aman Grewal 736

6

votes

1

answer

451

views

Pseudorandom Generator

stream-cipher pseudo-random-generator pseudo-random-function

modified Oct 9 at 23:50 kodlu 12.8k

7

votes

1

answer

344

views

NewHope and NIST's Post-quantum standardization

lattice-crypto nist lwe ring-lwe newhope

modified Oct 10 at 12:41 kelalaka 23.5k

2

votes

3

answers

206

views

3DES security when K1=K3

3des

modified Oct 19 at 16:08 fgrieu♦ 106k

2

votes

1

answer

289

views

Cryptographic properties of field multiplication

finite-field

answered Oct 7 at 13:04 poncho 113k

3

votes

1

answer

283

views

Implementing Standardized AES Algorithm

encryption implementation

answered Sep 29 at 11:55 SEJPM♦ 40.4k

2

votes

2

answers

400

views

DES : Is Double Encryption using same key twice equivalent to single DES using different key but of same size

encryption block-cipher des

modified Sep 29 at 18:48 kelalaka 23.5k

2

votes

2

answers

239

views

Why random number used in RSA padding but not in AES?

encryption rsa aes probabilistic-encryption

modified Oct 8 at 9:10 kelalaka 23.5k

4

votes

1

answer

272

views

Parity attack on block cipher

block-cipher permutation

modified Oct 10 at 4:42 fgrieu♦ 106k

3

votes

2

answers

242

views

If P256 ECDH shared secret contains ~128 bits of security, does using first half of the secret (= 128 bits) contain only 64 bits of security?

elliptic-curves diffie-hellman key-exchange key-derivation

modified Oct 15 at 7:27 fgrieu♦ 106k

3

votes

3

answers

111

views

Designing a secure UDP-based communication protocol

encryption aes gcm ctr

modified 2 days ago Samuel Moriarty 141

3

votes

1

answer

187

views

AES-CTR security if S-boxes substituion is omitted?

cryptanalysis s-boxes ctr file-encryption

modified Oct 9 at 16:42 kelalaka 23.5k

3

votes

3

answers

88

views

Is TEA suitable for encrypting/authenticating many short messages?

authentication tea

modified Oct 14 at 18:50 kelalaka 23.5k

3

votes

2

answers

167

views

Formula for bits of entropy per bit, when combining bits with XOR

aes entropy xor key-generation

modified Oct 6 at 21:50 poncho 113k

0

votes

2

answers

61

views

AES confused about how ShiftRows() step works

aes

answered Oct 19 at 18:10 Crowman 131

1

vote

2

answers

111

views

Why OpenSSH prefers ECDSA nistp256 keys over -384 and -521, and those over Ed25519, for host key verification?

ssh

answered Oct 2 at 17:45 squirrel 131

5

votes

2

answers

167

views

Fast cryptographic hash function for short inputs

hash implementation pseudo-random-generator

modified Oct 20 at 2:50 d1v 51

4

votes

2

answers

130

views

RSA - Is $e = d$ a problem?

rsa keys

modified Sep 27 at 14:43 fgrieu♦ 106k

2

votes

3

answers

166

views

Can AES GCM mode detect an incorrect key and refuse to decrypt?

aes gcm aes-gcm

modified Oct 7 at 16:46 fgrieu♦ 106k

1

vote

1

answer

151

views

Security of RSA cryptosystem variant

rsa

modified Oct 19 at 12:20 Fractalic 1,140

3

votes

1

answer

117

views

AES Padding (Nullbytes vs PKCS7)

aes cbc padding ecb

modified Oct 4 at 16:29 kelalaka 23.5k

2

votes

1

answer

115

views

Are all homomorphic encryption schemes based on latticed-based schemes?

homomorphic-encryption lattice-crypto

answered Oct 7 at 18:05 Geoffroy Couteau 13.2k

4

votes

1

answer

173

views

What are the rules for using AES-GCM correctly?

aes aes-gcm

modified Oct 9 at 16:02 kelalaka 23.5k

2

votes

1

answer

102

views

$P \ne NP$: a proof relating complexity theory to block ciphers

complexity hardness-assumptions

modified Sep 28 at 8:56 Maarten Bodewes♦ 74.1k

2

votes

2

answers

102

views

Identify AES Mode

encryption aes

answered yesterday Gilles 'SO- stop being evil' 13.3k

3

votes

2

answers

165

views

What is the advantage of adversary if the random number repeats?

encryption random-number-generator chosen-plaintext-attack adversarial-model

answered Sep 30 at 10:58 Doralisa 151

1

vote

2

answers

159

views

What is the size of a 1024-bit RSA cipher compared to its plaintext?

encryption rsa functional-encryption

modified Oct 4 at 19:03 Marcus 149

2

votes

2

answers

122

views

Difference between X25519 vs. Ed25519

elliptic-curves dsa ed25519 x25519

answered Oct 9 at 8:39 user4621 605

1

vote

1

answer

154

views

Is it possible to acquire the next keystream of Salsa20? (If you know part of the keystream)

stream-cipher attack salsa20 key-schedule key-recovery

modified Oct 17 at 18:44 kelalaka 23.5k

1

vote

1

answer

144

views

Is it dangerous to encrypt lots of small files with the same key?

aes gcm file-encryption

modified Oct 9 at 11:17 kelalaka 23.5k

1

vote

2

answers

140

views

Differential privacy noise that scales with $L_p$-sensitivity with $p>2$?

data-privacy differential-privacy

answered Sep 26 at 5:11 Kunal 36

8

votes

1

answer

179

views

Proof that no DES key makes encryption identity

des

modified Oct 9 at 17:07 Fractalic 1,140

1

vote

3

answers

118

views

What's the difference between digest algorithm and signing algorithm?

hash padding

modified Oct 21 at 14:10 Michael T 1

5

votes

1

answer

66

views

The Rationale behind NIST's counter/LFSR recommendation on deterministic IV constructions on SP 800-38D

aes random-number-generator initialization-vector aes-gcm

modified Oct 6 at 14:36 kelalaka 23.5k

4

votes

1

answer

81

views

How does Montgomery reduction work?

implementation finite-field montgomery-multiplication

modified Oct 7 at 16:07 kelalaka 23.5k

2

votes

1

answer

59

views

Converting common reference string to common random string

zero-knowledge-proofs

answered Oct 14 at 9:05 Geoffroy Couteau 13.2k

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.