Skip to main content

Explore our questions

1 vote
0 answers
30 views

Algorithm to turn a blockcipher into a PRP for any (large) group size

0 votes
1 answer
49 views

How to understand the counterexample constructed in the PRP/PRF switching lemma towards the standard proof?

3 votes
2 answers
133 views

Would there be any advantage in combining Feistel network and substitution-permutation network in a single cipher?

4 votes
1 answer
166 views

Efficiently implementing Speck96

2 votes
1 answer
62 views

Attack on Even-Mansour on top of 10 rounds of AESENC

3 votes
3 answers
854 views

Terminology: Is a block cipher in counter mode still considered a block cipher or is it classified as a stream cipher?

3 votes
3 answers
145 views

Security of cascaded ciphers (including question on counter-example from a paper)

3 votes
2 answers
753 views

Cracking a key using a combination of partial keys

3 votes
2 answers
134 views

What are advantages/disadvantages of an invertible tweak schedule in a tweakable block cipher?

4 votes
1 answer
199 views

How to prove the conclusion " linear operation $\mathsf{XOR}$ does not affect the division property"?

0 votes
0 answers
60 views

Parallel block cipher in CTR mode and variable number of threads: how to deal with internal state and permit decryption?

1 vote
1 answer
57 views

Is there a 4 by 4 NMDS matrix which is better than M= [[0,1,1,1], [1,0,1,1], [1,1,0,1], [1,1,1,0]] used in MIDORI?

2 votes
1 answer
73 views

Which was the first cipher that used the Maximum distance separable (MDS) matrix?

3 votes
1 answer
84 views

Midori block cipher design: importance of $S_b$ as the S-box

Browse more Questions