Popular Question - Badge - Cryptography Stack Exchange

Popular Question

Question with 1,000 views. This badge can be awarded multiple times.

Awarded 6671 times.

What would be the most effective way to brute force a 16 char AES key?

Awarded 2 mins ago

Alexander Forbes-Reed

1112 bronze badges

How to calculate the average key search time for the double des?

Awarded 14 hours ago

Edmund Ng

12 bronze badges

S-Box and it's linearity

Awarded 16 hours ago

Nick123

233 bronze badges

How can ECDSA signatures be shortened (to be used as a product key)?

Awarded 17 hours ago

Johan O

2612 silver badges6 bronze badges

blockcipher-based MACs with variable length that are UF-CMA secure?

Awarded 21 hours ago

securityDummy

194 bronze badges

Break RSA when modulus is of the form $N = pq$ with $|q^2 - p|$ small

Awarded yesterday

user1868607

1,21110 silver badges27 bronze badges

El-Gamal signature with two messages

Awarded yesterday

Paris Lamp

1294 bronze badges

Dieharder How can I make my input file suitable for Dieharder?

Awarded yesterday

quest

1416 bronze badges

How does reusing IV for OFB mode breaks the scheme

Awarded Sep 23 at 17:05

David

112 bronze badges

Validating an RSA public key

Awarded Sep 23 at 8:16

Maarten Bodewes♦

86.5k12 gold badges142 silver badges295 bronze badges

Is there much difference in a RSA-4096 over RSA-3072 for support/speed and security?

Awarded Sep 22 at 15:16

PixelPaul

1312 bronze badges

Can one use a Cryptographic Accumulator to efficiently store Lamport public keys without the need of a Merkle Tree?

Awarded Sep 22 at 7:36

SDL

1,79712 silver badges20 bronze badges

How should ECDSA handle the null hash?

Awarded Sep 22 at 6:04

Lery

7,2861 gold badge24 silver badges46 bronze badges

AES 128 bits with 12 bytes IV vector composed of a 4 bytes counter : safe?

Awarded Sep 21 at 4:42

Laurent Grégoire

1737 bronze badges

How to estimate the hardness of SIS instances?

Awarded Sep 20 at 21:26

Alan

1,3708 silver badges10 bronze badges

Can we say that if $P=NP$ there is no CPA secure public key encryption?

Awarded Sep 19 at 17:28

Bush

2,0202 gold badges15 silver badges26 bronze badges

AES implementation in java that allows key of 320-bit length [closed]

Awarded Sep 19 at 12:27

Ron

914 bronze badges

How does Permutation and Substitution work?

Awarded Sep 19 at 11:21

Erdss4

1351 silver badge5 bronze badges

Endomorphism ring of a Elliptic Curve and $j$ invariant

Awarded Sep 18 at 13:22

student

835 bronze badges

How can I determine if a hash function is secure?

Awarded Sep 17 at 18:30

Mountain_sheep

1413 bronze badges

Can combining two secure block ciphers be insecure?

Awarded Sep 17 at 12:27

securityDummy

194 bronze badges

Reseeding a PRNG with the generated PRN

Awarded Sep 17 at 11:51

Christian Kiewiet

1634 bronze badges

What is the relation between hash chaining and chosen prefix attack

Awarded Sep 17 at 11:18

user2726531

92 bronze badges

Determine RSA modulus from encryption oracle

Awarded Sep 16 at 21:25

Jannes Braet

1335 bronze badges

Verify product without revealing multipliers

Awarded Sep 16 at 15:25

Andrei Petrenko

1911 silver badge8 bronze badges

server_host_key_algorithms in SSH

Awarded Sep 15 at 20:57

Matt Elson

6997 silver badges14 bronze badges

how to define the Truncated Polynomial?

Awarded Sep 15 at 14:03

sravan nagiri

34 bronze badges

Composition of cryptographic hash functions

Awarded Sep 14 at 17:57

Kuba Chrabański

1796 bronze badges

How to encrypt with elliptic curve cryptography (ECC)?

Awarded Sep 14 at 9:31

Marcellvs

1114 bronze badges

Could Diffie-Hellman protocol serve as a zero-knowledge proof of knowledge of discrete logarithm?

Awarded Sep 14 at 4:27

Mikhail Koipish

6644 silver badges10 bronze badges

RSA Key Differences (OpenSSL CLI vs. OpenSSL/ssl.h C function)

Awarded Sep 14 at 2:08

Joshua Faust

1035 bronze badges

Differences between OWP and OWF and their IND-CPA security

Awarded Sep 13 at 14:36

Will Roberts

333 bronze badges

monoalphabetic substitution perfect secrecy

Awarded Sep 13 at 13:47

R. Kelly

312 bronze badges

Let $F$ be a PRF, is the following $G(x)=F_{0…0}(x)∥F_{0…1}(x)|| ... ||F_{1…1}(x)$ a PRG?

Awarded Sep 13 at 13:17

pa5h1nh0

4916 silver badges17 bronze badges

Does AES-CBC always use PKCS#7?

Awarded Sep 13 at 12:42

wujek

1756 bronze badges

Can the key-complement property of DES be used against 3DES?

Awarded Sep 13 at 7:26

otus

31.4k5 gold badges65 silver badges155 bronze badges

Simple proof that shows AES is not a uniform permutation on any n-bit string?

Awarded Sep 13 at 2:08

Tarun Verma

654 bronze badges

IV vector is not random. Is it critical?

Awarded Sep 12 at 23:05

sluge

1971 silver badge8 bronze badges

Secure way to compare two secret numbers without disclosing them?

Awarded Sep 12 at 19:55

Jerome

1135 bronze badges

Is there a security risk to use AES-CBC as stream cipher?

Awarded Sep 12 at 14:46

tarun14110

2471 silver badge8 bronze badges

Obtain Enigma key having a encrypted text and the plain text

Awarded Sep 12 at 13:10

poker

413 bronze badges

ciphertext stealing and CTR

Awarded Sep 12 at 12:47

ken

53 bronze badges

Is RDSEED a true RNG?

Awarded Sep 11 at 20:40

g Kishore

492 bronze badges

Why do web-services tend to use preshared secret keys for client authentication instead of public keys?

Awarded Sep 11 at 12:37

Gregory Magarshak

4053 silver badges9 bronze badges

Does the signature length of RS256 depend on the size of the RSA key used for signing?

Awarded Sep 9 at 10:56

Otto

1054 bronze badges

Is there an encryption scheme that is url-safe AND compact?

Awarded Sep 9 at 10:27

Joshua Frank

1235 bronze badges

Safe curves in Weierstrass form?

Awarded Sep 9 at 10:07

absinthe_minded

4454 silver badges9 bronze badges

Which MAC scheme is quantum resistant?

Awarded Sep 8 at 20:57

dwayn

933 bronze badges

What happens if CBC-mode uses the same IV for all processes?

Awarded Sep 8 at 6:16

Anh Đức Lương

112 bronze badges

How do I convert an elliptic key signature r and s value into a signature byte array?

Awarded Sep 7 at 17:47

David says Reinstate Monica

1215 bronze badges

Reasoning about WebCrypto ECDSA choices: P-256/384/521, SHA-1/256/384/512?

Awarded Sep 7 at 13:48

knaccc

3,8071 gold badge12 silver badges25 bronze badges

Should we really rely on "Cryptographically Secure Pseudo-Random Number Generators" (CSPRNG) alone to guarantee secure random output?

Awarded Sep 7 at 10:55

Neil Yoga Crypto

2931 gold badge2 silver badges10 bronze badges

How fast a middle-class computer can verify assymetric signatures (like ECDSA, RSA etc.)?

Awarded Sep 6 at 21:51

user84415

392 bronze badges

how do i implement zero knowledge proof?

Awarded Sep 5 at 20:06

ezio

474 bronze badges

Can I use the output from a DRBG directly as K for AES, or do I need to use a key generator algorithm?

Awarded Sep 5 at 10:47

Ali

1235 bronze badges

q-Strong Bilinear Diffie-Hellman

Awarded Sep 5 at 2:28

Alin Tomescu

7938 silver badges24 bronze badges

Is the following a PRG?

Awarded Sep 4 at 18:03

paddy

333 bronze badges

What is the difference between cfb and cfb1 and cfb8 ? ( like openssl's aria-128-cfb & aria-128-cfb1 & aria-128-cfb8 )

Awarded Sep 4 at 15:32

hanshenrik

4773 silver badges15 bronze badges

How can two different passphrases unlock the same content?

Awarded Sep 3 at 14:27

Sandra Schlichting

3194 silver badges8 bronze badges

Is Mathematics or Computer Science more important for a career in cryptography [closed]

Awarded Sep 3 at 7:26

Yan Ying

254 bronze badges

2 3 4 5

…

112 Next