Hottest Questions This Month

15

votes

9

answers

5k

views

Is one-time pad encryption vulnerable when near identical data is sent many times with different OTP?

one-time-pad

answered Feb 11 at 13:40 Christoph Burschka 111

6

votes

4

answers

3k

views

One Time Pads and “Bit Flip” Attacks

one-time-pad

modified 2 days ago F1Linux 90

10

votes

2

answers

814

views

Concrete evidence for the asymptotics of $\lambda_1(\Lambda^\perp(A))$?

answered Jan 17 at 16:05 Chris Peikert 3,768

9

votes

2

answers

1k

views

How does PKCS 1.5 solve the insecureness of Textbook RSA?

encryption rsa padding

modified Jan 24 at 14:37 fgrieu 79.9k

15

votes

2

answers

1k

views

Is there a contingency plan in the event of a catastrophic attack on AES?

aes nist rijndael standards

modified Jan 21 at 5:18 forest 3,980

6

votes

5

answers

1k

views

What is the point of digital signatures if confidentiality is violated?

rsa signature

modified Jan 25 at 18:55 John Kugelman 105

3

votes

2

answers

2k

views

Example of cryptography random number

random-number-generator randomness

modified Feb 5 at 16:37 Ella Rose♦ 16.2k

12

votes

2

answers

652

views

What motivated the creation of RSA and ECDH?

rsa elliptic-curves diffie-hellman history

modified Jan 28 at 14:42 Ella Rose♦ 16.2k

6

votes

2

answers

626

views

Is it possible to derive a public key from another public key without knowing a private key (Ed25519)?

public-key elliptic-curves key-derivation ed25519

modified 9 hours ago lovesh 330

3

votes

1

answer

1k

views

RSA: Is it possible to recover the plaintext given that we have the ciphertext and the public key?

rsa

modified Jan 19 at 12:10 fgrieu 79.9k

5

votes

1

answer

733

views

What is a related key?

keys

modified Jan 29 at 2:23 forest 3,980

7

votes

2

answers

842

views

Using a hash function as a random number generator

hash pseudo-random-generator sha-1 md5 probability

modified Feb 1 at 6:38 fgrieu 79.9k

7

votes

1

answer

561

views

Which properties of a group are used in the steps of Diffie Hellman?

diffie-hellman number-theory group-theory

modified Jan 22 at 21:28 poncho 92.1k

4

votes

2

answers

489

views

How can I hash an input into an arbitrary domain point?

hash signature sha-256 padding random-oracle-model

answered Feb 5 at 11:44 Ruggero 4,278

4

votes

3

answers

419

views

Pedersen commitment in elliptic curves

elliptic-curves commitments

modified Feb 1 at 17:39 fgrieu 79.9k

3

votes

1

answer

452

views

AES-CBC Padding: Why always attach 16x 0x10 pad?

aes cbc padding

modified Jan 21 at 17:49 Maarten Bodewes♦ 54.7k

6

votes

1

answer

366

views

Does Shannon perfect secrecy imply a deterministic encryption algorithm?

perfect-secrecy

answered 2 days ago poncho 92.1k

5

votes

3

answers

170

views

Formal description of KDF1 and KDF2

key-exchange key-derivation standards

modified yesterday Maarten Bodewes♦ 54.7k

3

votes

2

answers

314

views

Encrypting between nodes that have RSA keys: Diffie-Hellman or random secret key?

encryption rsa aes

modified Feb 7 at 21:21 Gilles 8,143

3

votes

1

answer

308

views

Hashing a counter to prevent distinguishers in CTR mode

ctr distinguisher

modified Jan 29 at 16:06 fgrieu 79.9k

4

votes

1

answer

472

views

Is there a feasible preimage attack for any hash function (no matter how deprecated) today?

hash collision-resistance attack preimage-resistance 2nd-preimage-resistance

answered Feb 5 at 5:53 forest 3,980

8

votes

1

answer

170

views

Does GCM (or GHASH) only provides 64-bit security against forgeries?

terminology security-definition

answered 2 days ago Shan Chen 1,480

5

votes

1

answer

163

views

Does ChaCha20-Poly1305 need random nonce?

pseudo-random-generator nonce chacha poly1305

modified Jan 26 at 17:13 Saptarshi Basu 300

3

votes

2

answers

235

views

What do the security definitions of SHA-3 mean, quantitatively?

hash preimage-resistance sha-3

modified Jan 30 at 11:20 Marian 116

4

votes

2

answers

92

views

Is it hypocritical to use AES-256 and RSA 2048 in the same application?

encryption rsa aes

answered yesterday Squeamish Ossifrage 16.6k

2

votes

1

answer

310

views

Is it safe to split the output of PBKDF2?

key-derivation pbkdf-2

modified Jan 30 at 22:29 Cavidan Mirze 1

6

votes

1

answer

241

views

Does Format Preserving Encryption have significant advantages over a randomly generated lookup table?

substitution-cipher format-preserving

modified Feb 4 at 17:15 fgrieu 79.9k

3

votes

1

answer

145

views

Is it possible to validate an email address without the user actually revealing the email address?

zero-knowledge-proofs

modified Jan 18 at 19:08 Mikero 5,554

2

votes

2

answers

85

views

Security of RSA for padding $\texttt{0x00|message|random_bytes}$

rsa padding

modified Feb 2 at 13:55 fgrieu 79.9k

4

votes

1

answer

296

views

Salsa20 as a PRNG with streams

random-number-generator salsa20

modified Jan 21 at 11:08 forest 3,980

5

votes

2

answers

288

views

Hardware RNG Bias

random-number-generator entropy

answered 4 hours ago Paul Uszak 7,274

3

votes

2

answers

194

views

Why are stream ciphers based on linear-feedback shift registers so popular?

stream-cipher lfsr

modified Jan 29 at 18:32 kelalaka 7,735

2

votes

1

answer

91

views

Unbreakable Hill cipher

encryption cryptanalysis perfect-secrecy hill-cipher

modified Feb 3 at 18:57 kelalaka 7,735

4

votes

2

answers

98

views

Generate one-time-pad with pre-shared key and public randomness

symmetric one-time-pad perfect-secrecy

modified Jan 25 at 7:14 fgrieu 79.9k

2

votes

3

answers

74

views

Terminology: Is a block cipher in counter mode still considered a block cipher or is it classified as a stream cipher?

block-cipher stream-cipher modes-of-operation terminology

modified Feb 1 at 2:08 Ilmari Karonen 34.9k

3

votes

2

answers

142

views

Is forward secrecy overhyped or necessary?

key-generation forward-secrecy

answered Feb 10 at 17:06 Thomas Pornin 69.9k

2

votes

2

answers

295

views

AES256 GCM IV guidelines

aes initialization-vector gcm

modified Jan 29 at 0:41 Richie Frame 9,997

7

votes

2

answers

107

views

Does there exist a mode of operation that forces mac-then-decrypt?

authenticated-encryption modes-of-operation

answered Feb 6 at 18:30 Jon Callas 1,988

-3

votes

2

answers

128

views

What is the difference between $\bmod{p - 1}$ and $\bmod p$

public-key

modified Jan 20 at 19:09 Boris Reitman 11

1

vote

2

answers

267

views

In which cases AES doesn't need IV?

aes ecb

modified Jan 30 at 6:14 forest 3,980

1

vote

2

answers

199

views

Can an RSA (private) modulus contain (hex) zeroes?

rsa

modified Feb 1 at 14:57 fgrieu 79.9k

4

votes

1

answer

107

views

How to generate $k$ random numbers that add upto a number $d$ and are coprime with respect to $p-1$

rsa

modified Jan 30 at 5:34 Zaid Bhat 31

4

votes

1

answer

137

views

How does Python's pycrypto library generate primes?

prime-numbers

modified Feb 5 at 19:16 kelalaka 7,735

4

votes

2

answers

102

views

Why is this MAC flawed?

hash mac xor

answered Jan 27 at 15:32 Maeher 3,710

-1

votes

1

answer

100

views

How to change hash checksum of a text file without changing the contents in the file

hash sha-256 sha-1

modified Feb 4 at 20:10 kelalaka 7,735

2

votes

1

answer

122

views

How does openssl signature verification work?

public-key signature openssl

modified Jan 24 at 8:06 grooveplex 103

3

votes

1

answer

172

views

Can we estimate the loss of entropy when applying a N-bit hash function to and N-bit random input?

hash entropy

modified Feb 10 at 22:30 kodlu 8,776

0

votes

1

answer

121

views

What's an entropy measure for the sequence $0, 1, 0, 1, 0, 1, …$?

entropy

modified Feb 5 at 10:54 Ruben De Smet 1,052

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.