Popular Question - Badge - Cryptography Stack Exchange

Popular Question

Question with 1,000 views. This badge can be awarded multiple times.

Awarded 7733 times.

Awarded 1 hour ago

213 bronze badges

If P256 ECDH shared secret contains ~128 bits of security, does using first half of the secret (= 128 bits) contain only 64 bits of security?

Awarded 15 hours ago

joonas.fi

1393 bronze badges

Using RSA encryption with OpenSSL library: secure?

Awarded 17 hours ago

Sahbi

1033 bronze badges

Winternitz hash based signature signing and verification

Awarded yesterday

Infinity

5753 silver badges14 bronze badges

How to correctly pad by PKCS#7 for AES?

Awarded yesterday

Ach113

1998 bronze badges

Why do we focus on polynomial time, rather than other kinds of time?

Awarded yesterday

Paul Uszak

15.2k2 gold badges26 silver badges75 bronze badges

Number of combinations required to brute force

Awarded 2 days ago

Dr.Paradox

312 bronze badges

Why is authenticated CFB mode insecure?

Awarded 2 days ago

NumberFour

4175 silver badges13 bronze badges

Why does CBC-MAC need prefix-free inputs to be a good PRF?

Awarded 2 days ago

pg1989

4,62623 silver badges40 bronze badges

NIST SP800-108 KDF modes comparison

Awarded 2 days ago

hsiaoying

213 bronze badges

Why do we need to use supersingular curve on SIDH?

Awarded Dec 5 at 19:06

Hzt

1076 bronze badges

Zero Knowledge Proof for Correctness of the product of additive ElGamal Ciphers [duplicate]

Awarded Dec 5 at 18:31

WeGi

1938 bronze badges

Build a scheme that is CCA secure but not authenticated

Awarded Dec 5 at 12:07

user153882

5076 silver badges17 bronze badges

Generate random numbers whose sum is equal to a constant value modulo n

Awarded Dec 4 at 17:47

AdveRSAry

6243 silver badges14 bronze badges

Encrypt password for oneself on paper

Awarded Dec 4 at 15:27

bash.d

1215 bronze badges

When using Ristretto or Decaf with Ed25519 and Ed448, do scalars still need pruning/trimming/clamping?

Awarded Dec 3 at 9:42

xorhash

2311 gold badge7 silver badges24 bronze badges

Hill cipher concepts

Awarded Dec 3 at 8:48

Arth

1112 bronze badges

Is SHA-256 a one way permutation when restricting the domain to {0,1}^256? [duplicate]

Awarded Dec 3 at 7:11

torrho

1891 silver badge4 bronze badges

Plain text size limits for AES-GCM mode at 2GB with Sun JCE implementation?

Awarded Dec 2 at 10:42

jmd

2452 silver badges7 bronze badges

Signature security proof in the Random Oracle model

Awarded Dec 1 at 21:26

Snoop Catt

1,2976 silver badges14 bronze badges

Advantages of HS1-SIV over ChaCha20-Poly1305-SIV?

Awarded Dec 1 at 13:33

Demi

4,7631 gold badge18 silver badges39 bronze badges

Looking at just EC Public Key parameters, how can you tell if it is invalid?

Awarded Dec 1 at 8:36

Liam Kelly

1835 bronze badges

How to find the public key in a digital certificate

Awarded Dec 1 at 2:49

David Klempfner

1257 bronze badges

Decrypting a substitution cipher, but with symbols instead of letters

Awarded Nov 30 at 15:41

Peter

33 bronze badges

Encode ASN.1 PKCS#8 Private Key with Public Key and attributes

Awarded Nov 30 at 11:57

Pedro Girardi

212 bronze badges

Help breaking ECDSA with biased nonces

Awarded Nov 30 at 8:35

Katoptriss

18610 bronze badges

SHA3 HMAC key padding

Awarded Nov 29 at 18:57

hunter

3,9456 gold badges27 silver badges40 bronze badges

Can I use any number as an ECC key?

Awarded Nov 29 at 18:06

Daniel Causebrook

1615 bronze badges

AES-256, CBC, plaintext length is multiple of block size: Does PKCS #7 padding weaken the encryption?

Awarded Nov 29 at 12:33

DrP3pp3r

1334 bronze badges

Hash ElGamal CCA approach

Awarded Nov 29 at 4:09

Gallieon474

216 bronze badges

Why do we need additional secret value (k) in ECDSA?

Awarded Nov 29 at 2:10

LeaBit

1334 bronze badges

Using ePassport with Active/Chip Authentication to sign documents

Awarded Nov 29 at 1:33

Proto Ukr

1534 bronze badges

SCP03 - Does it always to depend on pre-provisioned static keys?

Awarded Nov 28 at 17:20

Firat.Berk.Cakar

334 bronze badges

Paillier encryption: Many private keys for a public key

Awarded Nov 28 at 13:56

user153465

1,57312 silver badges23 bronze badges

What is the possibility of collision of trailing 160 bits of Keccak_256, for any two differing public-keys as pre-images?

Awarded Nov 28 at 12:42

Steven Hatzakis

3933 silver badges14 bronze badges

RSA Signing - Existential forgery and message prefix question. It's a weird one

Awarded Nov 28 at 5:11

Kendrick Taylor

1536 bronze badges

Multiparty key exchange for end-to-end encryption

Awarded Nov 28 at 1:47

milo

1415 bronze badges

Is transporting a salt, IV, ciphertext and HMAC in an encrypted token an acceptable practice?

Awarded Nov 27 at 13:56

Robert

1213 bronze badges

Input Hash Size of ECDSA Signature over Curve secp521r1

Awarded Nov 27 at 3:17

SamG101

6134 silver badges12 bronze badges

How do attacks on WEP work?

Awarded Nov 26 at 20:09

Minaj

1,0801 gold badge13 silver badges27 bronze badges

Discrete logarithm with unknown base

Awarded Nov 24 at 18:31

chris

334 bronze badges

TDES (Triple DES) DUKPT decryption

Awarded Nov 24 at 10:15

onesick1

213 bronze badges

Can an AES-GCM be cracked if the key is known but the nonce isn't?

Awarded Nov 23 at 13:15

Alejandro Cortez

133 bronze badges

Encrypting any text without key after padding oracle attack in CBC mode

Awarded Nov 23 at 8:30

Simple Mistake

134 bronze badges

AES with no SubByte - recover the key

Awarded Nov 23 at 2:03

JeanJean

334 bronze badges

Are curve secp256k1 ECDSA signatures distinguishable from random data?

Awarded Nov 22 at 20:41

fadedbee

8971 gold badge10 silver badges27 bronze badges

Calculating ECDSA Private Key From Multiple Signatures With Shared k (random nonce)

Awarded Nov 22 at 19:15

Martin

1136 bronze badges

Perfect Forward Secrecy in TLS

Awarded Nov 22 at 16:05

user93353

2,1793 gold badges21 silver badges40 bronze badges

Storage of Private Keys

Awarded Nov 22 at 16:05

Jordan Arsenault

1536 bronze badges

Why is SHA-2 considered an ARX construction when it also uses non-ARX operations?

Awarded Nov 22 at 15:01

LightTunnelEnd

1697 bronze badges

Rule 30 Cellular Automaton for Cryptography

Awarded Nov 22 at 1:16

William Hird

4911 gold badge5 silver badges18 bronze badges

Dieharder input data format. Do I need new line at the end? [closed]

Awarded Nov 22 at 0:34

Stepan

2212 silver badges8 bronze badges

Simple explanation of weak one way function

Awarded Nov 21 at 3:52

graphtheory92

7635 silver badges14 bronze badges

Elliptic Curve Verifiable Secret Sharing

Awarded Nov 20 at 20:05

user3112633

533 bronze badges

Please help me understand this k-out-of-n oblivious transfer protocol

Awarded Nov 20 at 15:47

user66875

1837 bronze badges

How is STS more secure than regular DH

Awarded Nov 20 at 15:20

Vlaya

32 bronze badges

Multi-secret sharing (Packed secret sharing) - Some questions

Awarded Nov 20 at 10:11

Rahul Mathur

1519 bronze badges

What is the non-programmable random oracle model?

Awarded Nov 20 at 9:27

The journey through LaTex

212 bronze badges

Could a 6502 CPU safely compute a SHA-1 hash in a reasonable length of time?

Awarded Nov 19 at 5:56

user371366

2181 silver badge6 bronze badges

BAD Record MAC error from the server [closed]

Awarded Nov 18 at 7:27

Ahamed Fayaz.

114 bronze badges

2 3 4 5

…

129 Next