5 votes
Accepted

Should hash salt and public key be a part of cryptographic signature?

This answer merely expands on this comment. is there any good reason to include both salt and public_key as a piece of hash? Reasons to do this include: It's impossible to reuse an existing ...
fgrieu's user avatar
  • 141k
4 votes
Accepted

Random based on video input, why isn't there some predictability

There is definitely some predictability if we take several snapshots back to back of the same image. However, if we wait a few seconds, there's still probably enough entropy to extract from the image ...
bk2204's user avatar
  • 3,381
4 votes

What is the purpose of making salted passwords public?

The difference is how the brute force attack scales: Without salt, the hacker can just hash the most likely passwords and then scan the whole database for the corresponding hashes. One succesful brute ...
rkw's user avatar
  • 41
3 votes
Accepted

How does linearity work with SWIFFT?

SWIFFT's main definition is of a compression function. This can be converted to a hash function in many (standard) ways, e.g. the MD transform. The SWIFFT paper doesn't bother with discussion of this (...
Mark Schultz-Wu's user avatar
3 votes

What does the leftover hash lemma guarantee for a specific hash function?

Suppose I sample a matrix $h$ from $\mathbb{Z}_2^{l \times n}$ where each entry in $h$ is $1$ with probability 1/2. One such matrix in this distribution is the all-zero matrix. Given that I sample $...
Leftover Hash Lemming's user avatar
1 vote

What does the leftover hash lemma guarantee for a specific hash function?

It's a tricky question in that there may be two (not necessarily equal) answers. There's the theoretical approach and the practical one. Practically and somewhat circuitously, we can go with NIST's ...
Paul Uszak's user avatar
  • 15.4k
1 vote
Accepted

Signing a file vs. a manifest of cryptographic hashes

Yes, chaining two secure mechanisms like this works, and is considered secure. If you use a secure hash function, an attacker would not be able to provide a different file and keep the manifest as is. ...
Meir Maor's user avatar
  • 11.8k
1 vote

BLAKE3 for Block and Stream ciphers?

Let's start with the stream cipher idea, since it's the simplest one. BLAKE3 already supports arbitrary-length outputs, so when you key it it can be trivially used as a stream cipher by hashing an ...
Samuel Neves's user avatar
  • 12.5k

Only top scored, non community-wiki answers of a minimum length are eligible