User Maarten Bodewes - on strike - Cryptography Stack Exchange

7 votes

2 answers

3k views

How to create an EC point from a plaintext message for encryption

asked Dec 10, 2019 at 23:07

2 votes

1 answer

76 views

Iteration count for (enhanced) Miller-Rabin

asked Feb 16 at 15:21

4 votes

1 answer

80 views

Which ciphers have been defined that use the Keccak sponge?

asked Jan 26 at 16:59

4 votes

0 answers

280 views

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

asked May 26, 2021 at 14:19

1 vote

1 answer

112 views

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

asked Jan 9 at 15:39

12 votes

1 answer

6k views

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

asked Mar 31, 2012 at 13:53

11 votes

2 answers

3k views

Validating an RSA public key

asked Sep 21, 2022 at 13:16

8 votes

1 answer

614 views

Is constant-time compare really required for AEAD ciphers?

asked Aug 26, 2022 at 10:29

8 votes

1 answer

2k views

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

asked Oct 21, 2016 at 8:28

15 votes

2 answers

2k views

Given enough RSA signature values, is it possible to determine the public key value?

asked Mar 12, 2016 at 15:24

12 votes

1 answer

5k views

Sending KCV (key check value) with cipher text

asked Feb 25, 2012 at 13:10

0 votes

1 answer

68 views

Meaning of the term "irreversible" for hashing

asked May 27, 2022 at 13:02

27 votes

1 answer

3k views

What is hardened SHA-1, how does it work and how much protection does it offer?

asked Feb 23, 2017 at 19:53

5 votes

0 answers

135 views

Upgrading key derivation by adding an XOR with a known value

asked Nov 23, 2018 at 11:37

3 votes

1 answer

194 views

What's the use of storing R^2 with a public key?

asked Aug 2, 2021 at 16:08

25 votes

2 answers

13k views

Is RSA encryption with a private key the same as signature generation?

asked May 4, 2014 at 16:43

2 votes

0 answers

64 views

What are the differences between the various Authenticated Encryption schemes using Keccak?

asked Jul 13, 2021 at 10:02

2 votes

2 answers

280 views

What does OIW stand for

asked Oct 3, 2014 at 16:03

2 votes

2 answers

348 views

How does TLS with PQC use key encapsulation?

asked Mar 1, 2021 at 9:06

10 votes

0 answers

186 views

Do CCM and EAX provide key commitment?

asked Jan 25, 2021 at 15:57

2 votes

1 answer

67 views

Can you use a dynamic key and data size for KMAC?

asked Jan 13, 2021 at 12:16

9 votes

1 answer

784 views

Can Whirlpool take advantage of AES-NI?

asked Nov 10, 2016 at 9:52

5 votes

0 answers

135 views

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

asked Jan 6, 2021 at 14:08

5 votes

1 answer

390 views

What are the public key and output sizes for the four remaining PQC KEM candidates?

asked Dec 22, 2020 at 10:09

28 votes

2 answers

20k views

Which attacks are possible against raw/textbook RSA?

asked Nov 7, 2014 at 15:59

7 votes

0 answers

257 views

How many qubits are required to break classical Diffie-Hellman?

asked Aug 15, 2018 at 13:29

3 votes

2 answers

576 views

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

asked Sep 16, 2020 at 15:57

0 votes

0 answers

152 views

Security of CCM using 8 byte MAC within TLS

asked Aug 13, 2020 at 13:42

6 votes

2 answers

455 views

Using XOR to derive a data key for ECIES

asked Jul 24, 2020 at 9:58

5 votes

2 answers

2k views

What is the difference between data compression and compression in cryptographic algorithms?

asked May 17, 2020 at 20:38

Stack Exchange Network

102 Questions

How to create an EC point from a plaintext message for encryption

Iteration count for (enhanced) Miller-Rabin

Which ciphers have been defined that use the Keccak sponge?

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

Validating an RSA public key

Is constant-time compare really required for AEAD ciphers?

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

Given enough RSA signature values, is it possible to determine the public key value?

Sending KCV (key check value) with cipher text

Meaning of the term "irreversible" for hashing

What is hardened SHA-1, how does it work and how much protection does it offer?

Upgrading key derivation by adding an XOR with a known value

What's the use of storing R^2 with a public key?

Is RSA encryption with a private key the same as signature generation?

What are the differences between the various Authenticated Encryption schemes using Keccak?

What does OIW stand for

How does TLS with PQC use key encapsulation?

Do CCM and EAX provide key commitment?

Can you use a dynamic key and data size for KMAC?

Can Whirlpool take advantage of AES-NI?

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

What are the public key and output sizes for the four remaining PQC KEM candidates?

Which attacks are possible against raw/textbook RSA?

How many qubits are required to break classical Diffie-Hellman?

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

Security of CCM using 8 byte MAC within TLS

Using XOR to derive a data key for ECIES

What is the difference between data compression and compression in cryptographic algorithms?