Popular Question - Badge - Cryptography Stack Exchange

Popular Question

Question with 1,000 views. This badge can be awarded multiple times.

Awarded 7161 times.

Is an RSA variant with public exponent $e=f+(p-1)\cdot(q-1)$ safe (for $f$ random in some small interval)?

Awarded Mar 2 at 21:06

fgrieu♦

132k12 gold badges290 silver badges555 bronze badges

Given a 'good' basis for a lattice, how can we solve the CVP?

Awarded Mar 2 at 14:57

pg1989

4,60621 silver badges39 bronze badges

Why do the subexponential algoriths for the DLP not work for the ECDLP?

Awarded Mar 1 at 9:35

Demi

4,7531 gold badge18 silver badges38 bronze badges

Why did post-quantum key exchanges go extinct?

Awarded Feb 28 at 9:51

user

1131 silver badge6 bronze badges

Modular exponentiation with Chinese Remainder Theorem

Awarded Feb 27 at 20:10

Arch1tect

1135 bronze badges

Discrete Gaussian Sampling role in Lattice-Based Crypto?

Awarded Feb 27 at 12:11

Daniel B

3371 silver badge10 bronze badges

Indistinguishable encryptions in the presence of an eavesdropper

Awarded Feb 27 at 5:56

user153882

5076 silver badges16 bronze badges

Proper use of AES CTR

Awarded Feb 26 at 15:09

SOSO30

333 bronze badges

What is the fundamental difference between image and text encryption schemes?

Awarded Feb 26 at 2:45

Muhammad Fauzi

1036 bronze badges

PGP file size limit for encryption

Awarded Feb 25 at 22:56

Ozwel

355 bronze badges

Why is the maximum record size in TLS 1.3 limited to $2^{14}$ bytes?

Awarded Feb 24 at 19:03

Vlad

812 bronze badges

XChaCha20 vs AES 128 security and speed

Awarded Feb 24 at 13:57

imdoingmath

154 bronze badges

Designing a secure UDP-based communication protocol

Awarded Feb 24 at 8:07

Samuel Moriarty

1416 bronze badges

Zk-Snarks vs Homomorphic Encryption

Awarded Feb 24 at 7:40

DjVasu

33 bronze badges

What's the definition of the width of a circuit

Awarded Feb 23 at 23:49

CryptoLover

8926 silver badges17 bronze badges

chacha20-poly1305 padding and length encoding

Awarded Feb 23 at 20:52

dietr

1433 bronze badges

In regard to using RSA-OAEP-256 in JWE to also authenticate token issuer

Awarded Feb 22 at 15:28

Wendong

112 bronze badges

Would it be safe to use the message hash as the IV in ChaCha?

Awarded Feb 21 at 19:45

alandefreitas

1351 silver badge6 bronze badges

Why is modulo being used for congruence in SHA-2 padding when the outcome is always the same?

Awarded Feb 21 at 16:48

Stephan-v

1235 bronze badges

What is the encoding protocol for passphrase protected RSA private keys?

Awarded Feb 21 at 15:41

clay

1551 silver badge7 bronze badges

Why is a common reference string needed in zero knowledge proofs?

Awarded Feb 21 at 14:04

WeCanBeFriends

1,26310 silver badges19 bronze badges

How to derive a private/public keypair from a random seed?

Awarded Feb 21 at 2:50

Kind Contributor

1378 bronze badges

Replay attack resistant MAC?

Awarded Feb 20 at 17:05

shpark

1233 bronze badges

Is RSA longer supported in TLS 1.3 and are RSA and DH fundamentally different?

Awarded Feb 19 at 3:41

c_idle

1712 bronze badges

How to generate keys from a 56 bit using DES

Awarded Feb 18 at 8:18

Hakim Cheheb

11 bronze badge

How to generate random numbers within a range (0,n) from random bits?

Awarded Feb 18 at 7:40

crypt

2,31315 silver badges31 bronze badges

When, where, and how to use HMAC

Awarded Feb 17 at 22:02

Awn

1,4821 gold badge12 silver badges18 bronze badges

Is there a hash function that's more expensive for an attacker than for the server?

Awarded Feb 16 at 22:20

n-l-i

4252 silver badges8 bronze badges

Why is a MAC needed with CBC?

Awarded Feb 16 at 18:55

lxgr

1,7681 gold badge13 silver badges22 bronze badges

How to find the inverse of a polynomial in NTRU-PKCS

Awarded Feb 16 at 14:03

Aran Smeallie

334 bronze badges

Is using Ed25519 parameters in ECDSA safe?

Awarded Feb 15 at 10:16

Syrian Watermelon

1809 bronze badges

Comparison of SNARK-friendly hash algorithms MiMC7, Poseidon, Pederson?

Awarded Feb 15 at 8:41

Habib

9418 silver badges23 bronze badges

Is there a reason to use multiple hashing algorithms in a single system?

Awarded Feb 15 at 6:37

Abol_Fa

275 bronze badges

Does Paillier Homomorphic Encryption Work only with numbers?

Awarded Feb 15 at 2:36

NuminousName

4524 silver badges14 bronze badges

Does XOR have diffusion properties?

Awarded Feb 14 at 20:51

Nat

4153 silver badges12 bronze badges

Is there an encryption scheme that provides $Pr\{M_1 = m_1\wedge M_2 = m_2 | C_1 = c_1 \wedge C_2 = c_2\} = Pr\{M_1 = m_1 \wedge M_2 = m_2\}$

Awarded Feb 14 at 16:20

Mohammad Rostami

12 bronze badges

If H(m) = 0 for some m, how can a DSA signature be forged?

Awarded Feb 14 at 16:20

24601

193 bronze badges

Concatenating hashes

Awarded Feb 14 at 14:19

fabulias

113 bronze badges

Finding IV in AES-128 having partial Key and plaintext

Awarded Feb 13 at 19:56

giacom0c

1015 bronze badges

What is the point of differential cryptanalysis when the amount of necessary plaintext is unrealistic?

Awarded Feb 13 at 3:11

AdHominem

1417 bronze badges

How does one conduct a known-plaintext attack on an algorithm?

Awarded Feb 12 at 1:21

the_endian

1651 silver badge7 bronze badges

Memory-hard password hash in practice?

Awarded Feb 11 at 15:42

fgrieu♦

132k12 gold badges290 silver badges555 bronze badges

How is Argon2 used for key derivation? [duplicate]

Awarded Feb 10 at 17:17

Manglemix

454 bronze badges

How is a PRP different from PRF? Both can be inverted to get the same input

Awarded Feb 10 at 3:57

Saptarshi Basu

5085 silver badges14 bronze badges

Derivation of birthday paradox probability

Awarded Feb 10 at 3:15

sanjihan

1951 silver badge7 bronze badges

irreducible Polynomial in a Cipher

Awarded Feb 10 at 1:41

crypt

2,31315 silver badges31 bronze badges

How to Understand Authenticated Key Exchange?

Awarded Feb 9 at 21:06

Land

577 bronze badges

Finding k collisions on hash function

Awarded Feb 8 at 3:07

Daniel

4273 silver badges12 bronze badges

How likely is it that AES-256 is crackable within 100 years (2120)?

Awarded Feb 7 at 22:45

Nic

4882 silver badges9 bronze badges

File encryption with AES CTR mode

Awarded Feb 7 at 17:33

Anders HK

312 bronze badges

Retrieve AES Key

Awarded Feb 7 at 17:21

Ruan Sunkel

1996 bronze badges

How to determine which type of transposition cipher I have?

Awarded Feb 7 at 13:40

Lauren Hosking

454 bronze badges

OpenSSL supports AES, Camellia, ChaCha. How about Twofish, Threefish, Serpent?

Awarded Feb 7 at 12:57

RocketNuts

1,3871 gold badge10 silver badges22 bronze badges

decoding a Ed25519 key per RFC8032

Awarded Feb 7 at 7:28

neubert

2,8551 gold badge25 silver badges48 bronze badges

Decrypting LFSR, knowing the beginning of the cyphertext, and nothing else

Awarded Feb 7 at 3:28

Ataberk Özbay

112 bronze badges

How does Montgomery reduction work?

Awarded Feb 6 at 17:51

Vivekanand V

9686 silver badges18 bronze badges

How to generate a circuit for SHA-256?

Awarded Feb 6 at 17:28

user77340

7774 silver badges12 bronze badges

Chaum-Pedersen Protocol

Awarded Feb 6 at 9:51

jeldzinski

234 bronze badges

Are there any applications of Quantum Computation to Cryptography? (besides Cryptanalysis)

Awarded Feb 5 at 22:26

Daniel

3,8621 gold badge17 silver badges33 bronze badges

HMACSHA256 2.5 times faster than HMACSHA512

Awarded Feb 5 at 20:26

ispiro

1,9552 gold badges17 silver badges29 bronze badges

Prev 1

3 4 5

…

120 Next