Nice Question - Badge - Cryptography Stack Exchange

Nice Question

Question score of 10 or more. This badge can be awarded multiple times.

Awarded 1707 times.

Paillier can add and multiply, why is it only partially homomorphic?

Awarded 10 hours ago

Cedric Martin

4454 silver badges11 bronze badges

Best cryptographic algo with asymmetric cost: expensive to sign, cheap to validate

Awarded Oct 29 at 12:16

scosman

2037 bronze badges

Does Grover's algorithm really threaten symmetric security proofs?

Awarded Oct 18 at 19:22

Victor Espinoza

1711 silver badge9 bronze badges

How to use GCM mode and associated-data properly

Awarded Oct 15 at 0:40

hunter

3,9456 gold badges27 silver badges39 bronze badges

Changing an Encryption scheme from AES to ChaCha20

Awarded Oct 12 at 10:35

SSA

6305 silver badges11 bronze badges

Is a secure deterministic MAC always a PRF?

Awarded Oct 10 at 1:27

Alex Goft

2552 silver badges8 bronze badges

Point halving on elliptic curves of even order

Awarded Oct 3 at 18:26

irakliy

9697 silver badges15 bronze badges

Is CBC mode with a fixed IV secure, if a counter is prepended to the plaintext?

Awarded Sep 27 at 14:56

Ilmari Karonen

45.9k5 gold badges105 silver badges179 bronze badges

Somewhat Homomorphic Encryption versus Fully Homomorphic Encryption?

Awarded Sep 27 at 4:26

user153465

1,57312 silver badges23 bronze badges

ECDH or RSA more secure for symmetric key wrapping?

Awarded Sep 6 at 9:02

NumberFour

4175 silver badges12 bronze badges

Which attacks are possible against raw/textbook NTRU encryption?

Awarded Sep 1 at 16:56

cygnusv

4,9421 gold badge21 silver badges47 bronze badges

Curve25519 Key Validation

Awarded Aug 30 at 6:51

Marc

2971 silver badge12 bronze badges

Is it safe to create a public ID by hashing a private key?

Awarded Aug 28 at 13:26

Moss Richardson

1931 gold badge1 silver badge4 bronze badges

Are there any weak nonce-misuse resistant encryption scheme?

Awarded Aug 24 at 18:04

kelalaka

47.5k11 gold badges113 silver badges192 bronze badges

Why use RSA-2048 for plaintext when AES-256 is much more secure?

Awarded Aug 18 at 14:16

daniel

3812 gold badges4 silver badges13 bronze badges

Meaning of the term "Key Material"

Awarded Aug 16 at 12:16

mac.ma

2012 silver badges3 bronze badges

Why is the maximum record size in TLS 1.3 limited to $2^{14}$ bytes?

Awarded Aug 11 at 21:43

Vlad

1113 bronze badges

What is “Implicit Authentication”?

Awarded Aug 11 at 9:36

Dilini

2032 silver badges5 bronze badges

GCM padding or not?

Awarded Aug 7 at 18:19

M-elman

1,2483 gold badges15 silver badges24 bronze badges

Are one time pads still used, perhaps for military or diplomatic purposes?

Awarded Aug 6 at 23:26

Paul Uszak

15.1k2 gold badges26 silver badges74 bronze badges

Should I use self generated or predefined RFC 7919 DH groups?

Awarded Jul 20 at 0:43

wedi

2111 silver badge5 bronze badges

What is universal composability guaranteeing, specifically? Where does it apply, and where does it not?

Awarded Jul 17 at 16:02

Expectator

3221 silver badge9 bronze badges

What does 'a reduction is tight' mean rigorously?

Awarded Jul 5 at 7:50

Lee Seungwoo

3631 silver badge7 bronze badges

Mapping of message onto elliptic curve and reverse it?

Awarded Jun 22 at 14:50

franckysnow

2132 silver badges6 bronze badges

CKM_RSA_PKCS vs CKM_RSA_X_509 mechanisms in PKCS#11

Awarded Jun 6 at 13:03

Ehsan Khodarahmi

2364 silver badges12 bronze badges

What are the pros and cons of Pedersen commitments vs hash-based commitments?

Awarded Jun 2 at 23:19

Ian MathWiz

5053 silver badges11 bronze badges

Why is authenticated CFB mode insecure?

Awarded Jun 1 at 20:02

NumberFour

4175 silver badges12 bronze badges

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

Awarded May 27 at 3:12

forest♦

15.1k2 gold badges46 silver badges101 bronze badges

HMAC for short messages

Awarded May 25 at 4:11

Matthew

2471 silver badge9 bronze badges

Are there comprehensive alternatives to RSA?

Awarded May 22 at 10:41

Ali

4612 gold badges6 silver badges11 bronze badges

Use of q-ary lattices in developing cryptosystems

Awarded May 22 at 0:42

preethi

8896 silver badges21 bronze badges

Under what conditions did a Bletchley bombe stop?

Awarded May 17 at 4:20

Geoff

3512 silver badges12 bronze badges

Can an AI really generate random numbers?

Awarded Apr 25 at 11:25

swannty

3811 gold badge3 silver badges8 bronze badges

Why invent new hash functions for zero-knowledge proofs?

Awarded Apr 22 at 16:37

Paul Miller

3401 silver badge12 bronze badges

Why are NaCl secret keys 64 bytes for signing, but 32 bytes for box?

Awarded Apr 20 at 22:17

knaccc

4,7121 gold badge14 silver badges28 bronze badges

Who is the inventor of the OFB block cipher mode of operation?

Awarded Apr 19 at 4:10

kelalaka

47.5k11 gold badges113 silver badges192 bronze badges

Why OpenSSH prefers ECDSA nistp256 keys over -384 and -521, and those over Ed25519, for host key verification?

Awarded Apr 18 at 14:08

squirrel

3211 gold badge2 silver badges7 bronze badges

Why Ed25519 encodes y-coordinates rather than x-coordinates

Awarded Apr 16 at 15:36

Raoul722

2,8262 gold badges19 silver badges38 bronze badges

What can make an implementation of a large integer library unsafe for cryptography

Awarded Apr 10 at 7:05

Keen

2331 silver badge6 bronze badges

HMAC-SHA256 vs HMAC-SHA512 for JWT API authentication

Awarded Apr 6 at 8:43

W.M.

2031 gold badge2 silver badges5 bronze badges

Why can ssh-keygen export a public key in PEM PKCS8 format?

Awarded Apr 5 at 11:48

Edward

2011 gold badge2 silver badges5 bronze badges

Prove that what's running inside a black box is code that has been released publicly

Awarded Apr 3 at 14:17

nialv7

2031 silver badge5 bronze badges

In textbook RSA with low public exponent, how big does a random message needs to be?

Awarded Mar 31 at 19:05

fgrieu♦

138k12 gold badges302 silver badges579 bronze badges

Whats the point of an IV if public? [duplicate]

Awarded Mar 26 at 15:16

user27551

1111 silver badge3 bronze badges

What is an elliptic curve cofactor?

Awarded Mar 24 at 16:41

Mark

8256 silver badges24 bronze badges

Problems with using AES Key as IV in CBC-Mode

Awarded Mar 23 at 21:36

Chris

1031 silver badge4 bronze badges

Calculation of the avalanche effect coefficient

Awarded Mar 15 at 14:56

Kishan Kishore

2212 silver badges8 bronze badges

GCM mode of operation with long-term keys

Awarded Mar 9 at 17:33

Sadeq Dousti

1,0639 silver badges20 bronze badges

Why are ed25519 keys not recommended for encryption?

Awarded Mar 9 at 6:04

Lenny

1531 gold badge1 silver badge5 bronze badges

Encrypting a key with the same key, for instance using AES

Awarded Mar 7 at 21:27

madhukar2k2

1013 bronze badges

Is knowing the private key of RSA equivalent to the factorization of $N$?

Awarded Mar 2 at 9:21

T.B

1,28213 silver badges24 bronze badges

How does AWS Secret key and access key work

Awarded Feb 28 at 16:10

user855

3514 silver badges7 bronze badges

curve25519 weak points for contributory behaviour

Awarded Feb 20 at 15:34

Perseids

5623 silver badges13 bronze badges

Appropriate scrypt parameters when generating an scrypt hash

Awarded Feb 19 at 16:35

McJohnson

2332 silver badges4 bronze badges

Is there a hash function that's more expensive for an attacker than for the server?

Awarded Feb 16 at 23:00

n-l-i

4353 silver badges9 bronze badges

Understanding Feldman's VSS with a simple example

Awarded Feb 16 at 9:32

mikeazo

38.5k8 gold badges112 silver badges178 bronze badges

What is a trapdoor permutation?

Awarded Feb 15 at 0:55

user1812844

2531 gold badge2 silver badges4 bronze badges

Perfect shuffle possible with limited raw entropy?

Awarded Feb 13 at 14:11

RokL

2111 silver badge5 bronze badges

ECIES vs. RSA + AES

Awarded Feb 10 at 23:04

Vlad

5391 gold badge4 silver badges12 bronze badges

Is there any protocol for proving that a message was written at a certain time?

Awarded Feb 10 at 3:15

Christine Sheng

1212 bronze badges

2 3 4 5

…

29 Next