Hottest Questions This Month

31

votes

8

answers

10k

views

Why do some people believe that humans are “bad at” generating random numbers/characters like this?

answered Feb 8 at 11:46 mkkekkonen 101

58

votes

3

answers

18k

views

Does Schnorr's 2021 factoring method show that the RSA cryptosystem is not secure?

rsa factoring

modified 7 hours ago Crystal.HF 3

28

votes

7

answers

5k

views

Does Terra Quantum AG break AES and Hash Algorithms?

hash aes post-quantum-cryptography grovers-algorithm

modified Feb 12 at 15:25 helloworld 21

8

votes

5

answers

2k

views

Computational Complexity Of Breaking Information Theoretic Security

modified Feb 9 at 20:29 kelalaka 32.7k

6

votes

3

answers

2k

views

Can one use a reversible hash algorithm as a compression function?

encryption hash sha-256

modified Feb 22 at 7:07 The_Sympathizer 141

8

votes

1

answer

1k

views

Triple AES-128 encryption with 2 keys

aes meet-in-the-middle-attack

modified Feb 23 at 12:27 fgrieu♦ 110k

3

votes

2

answers

780

views

Side-Channel Attacks in the Cloud

side-channel-attack secure-storage

answered Feb 22 at 17:50 Meir Maor 8,619

2

votes

1

answer

981

views

Potential Service Life of ChaCha20?

encryption cryptanalysis chacha

modified Feb 22 at 0:07 kelalaka 32.7k

3

votes

2

answers

478

views

AES-CBC decrypts to wrong output?

aes block-cipher cbc

modified Feb 19 at 21:02 kelalaka 32.7k

5

votes

2

answers

285

views

Recommendation of lightweight RNG for Miller-Rabin primality test

algorithm-design implementation randomness

modified Feb 15 at 21:16 DannyNiu 4,566

3

votes

2

answers

220

views

Would EdDSA be broken by replacing H(R, A, M) with H(A, M)?

schnorr-signature threshold-cryptography eddsa

modified Feb 10 at 17:27 Frans Lundberg 355

4

votes

1

answer

449

views

Constant Time Multiplication for Cryptography in Pure Software without Hardware Multiplier or Barrel Shifter

timing-attack

modified Feb 8 at 13:04 fgrieu♦ 110k

4

votes

2

answers

348

views

Why are leaf nodes hashed in merkle tree?

password-hashing merkle-damgaard

modified Mar 1 at 20:08 m0bi5 142

4

votes

2

answers

163

views

Substitution ciphers amended with cipher block chaining: susceptible to frequency analysis?

cbc substitution-cipher frequency-analysis

modified 5 hours ago kelalaka 32.7k

1

vote

2

answers

156

views

80-bit vs 128-bit security in today's world

encryption

modified Mar 1 at 7:55 kelalaka 32.7k

4

votes

2

answers

311

views

What are the differences between a UHF (as used in cryptography) and a cryptographic hash function?

collision-resistance universal-hash

modified Feb 16 at 9:41 SEJPM♦ 42.4k

4

votes

3

answers

66

views

Is it secure to compute the exponentiation and the LWE operation?

elliptic-curves ring-lwe

modified Feb 25 at 10:02 kelalaka 32.7k

5

votes

3

answers

170

views

A question regarding next-bit predictors

pseudo-random-generator pseudo-random-function computational-complexity-theory

answered Feb 25 at 11:56 Marc Ilunga 872

2

votes

2

answers

225

views

Prime order elliptic curve groups: Generators and the reason choice

elliptic-curves group-theory

modified yesterday kelalaka 32.7k

3

votes

2

answers

247

views

Why isn't f(G) uniform in ECDSA?

elliptic-curves

modified Feb 17 at 19:52 kelalaka 32.7k

2

votes

1

answer

312

views

Is tagging the hash of a password along with ciphertext secure?

encryption hash cryptanalysis key-derivation passwords

modified Feb 16 at 7:36 kelalaka 32.7k

2

votes

4

answers

284

views

Proof of number of logins in last N days without saving login times

implementation

modified Feb 8 at 6:28 mentallurg 1,503

0

votes

2

answers

135

views

Is it guaranteed that all possible random numbers can be produced?

random-number-generator pseudo-random-generator

modified Feb 23 at 18:15 fgrieu♦ 110k

-1

votes

2

answers

201

views

+50

How to decrypt two images encrypted using XOR with the same key?

one-time-pad xor key-reuse ciphertext-only-attack

answered Feb 26 at 14:51 Ilmari Karonen 41.9k

5

votes

2

answers

156

views

Is this problem with anti-circulant matrices hard?

hardness-assumptions

modified Feb 13 at 17:13 fgrieu♦ 110k

3

votes

4

answers

149

views

If pseudorandom functions (PRFs) are deterministic in nature, how can encryption schemes using PRF be CPA secure?

pseudo-random-function chosen-plaintext-attack

answered Feb 13 at 2:54 hlayhel 29

5

votes

1

answer

115

views

Can one tell private key entropy from a public key?

public-key

modified Feb 24 at 12:36 fgrieu♦ 110k

1

vote

1

answer

113

views

Can an altered RSA private key still work as the original?

rsa public-key

modified Feb 22 at 2:02 Swashbuckler 1,216

2

votes

3

answers

64

views

Can schnorr-signatures be used to ensure public keys are of the correct form (namely $Y= x \cdot G$)?

elliptic-curves schnorr-signature

modified Feb 18 at 12:44 fgrieu♦ 110k

2

votes

2

answers

121

views

How to handle modular arithmetic with regard to two's-complement negative numbers?

rsa implementation modular-arithmetic

modified Feb 18 at 6:36 fgrieu♦ 110k

4

votes

1

answer

72

views

Is the HMAC of a broken hash such as MD2, MD5, SHA1 etc, also broken?

hash collision-resistance hmac

modified Feb 10 at 19:47 kelalaka 32.7k

2

votes

1

answer

85

views

How do I multiply two points on an elliptic curve?

modified Feb 13 at 15:26 kelalaka 32.7k

3

votes

2

answers

65

views

How big does M need to be in Blum Blum Shub?

random-number-generator randomness blum-blum-shub

answered Feb 20 at 10:36 SEJPM♦ 42.4k

6

votes

1

answer

103

views

Is XOR-and-SUM inherently sequential?

inherently-sequential

answered Feb 8 at 20:11 Lery 5,888

3

votes

2

answers

77

views

How many different keys can be derived with HKDF before two outputs are identical?

collision-resistance key-derivation hkdf

modified Mar 1 at 12:33 Maarten Bodewes♦ 77.3k

1

vote

2

answers

58

views

What symmetric algo does TLS use?

symmetric tls

answered 2 days ago Maarten Bodewes♦ 77.3k

4

votes

1

answer

57

views

Weak Decisional Diffie-Hellman Problem

diffie-hellman

answered Feb 19 at 20:14 Geoffroy Couteau 14.1k

4

votes

2

answers

120

views

Single-block hash construction based on a block cipher with two fixed keys

one-way-function proof-of-work

modified Feb 11 at 18:02 Mikero 7,725

0

votes

2

answers

93

views

Diffie-Hellman key generation

diffie-hellman key-generation

modified Feb 10 at 12:58 Patriot 2,321

3

votes

1

answer

110

views

Why does PGP still use the Fermat primality test? What if it hits one of the Carmichael numbers？

rsa prime-numbers pgp

modified Feb 21 at 20:10 kelalaka 32.7k

2

votes

3

answers

140

views

Can anyone explain to me the difference between the OTP (one-time pad) and Vernam Cipher?

encryption block-cipher stream-cipher one-time-pad substitution-cipher

modified Feb 10 at 5:18 Patriot 2,321

1

vote

1

answer

66

views

Security level of DSA when $q$ is a 224 bit prime?

dsa

modified Feb 28 at 2:15 fgrieu♦ 110k

2

votes

2

answers

61

views

ElGamal encryption security

elgamal-encryption group-theory

modified yesterday fgrieu♦ 110k

0

votes

2

answers

77

views

How are ECC keys stored?

elliptic-curves keys encoding standards

answered yesterday dave_thompson_085 4,727

1

vote

1

answer

74

views

Modified ECIES using EC point ADD with DH key

encryption elliptic-curves diffie-hellman ecies

modified Feb 11 at 11:22 Sajjon 151

0

votes

1

answer

156

views

Homomorphic mapping between elliptic curve point and Zq

elliptic-curves

modified 2 days ago mehdi mahdavi oliaiy 118

1

vote

1

answer

55

views

Is RSA-OAEP secure against Shor's factoring algorithm

rsa factoring shors-algorithm

modified Feb 11 at 3:43 kodlu 13.5k

4

votes

1

answer

89

views

LWE with identity sub-matrix and reused sampled from [MP12]: why is it secure?

lattice-crypto lwe

modified Feb 20 at 23:37 Mark 3,748

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.