User Maarten Bodewes - on strike - Cryptography Stack Exchange

2 votes

1 answer

76 views

Iteration count for (enhanced) Miller-Rabin

asked Feb 16 at 15:21

4 votes

1 answer

80 views

Which ciphers have been defined that use the Keccak sponge?

asked Jan 26 at 16:59

1 vote

1 answer

112 views

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

asked Jan 9 at 15:39

11 votes

2 answers

3k views

Validating an RSA public key

asked Sep 21, 2022 at 13:16

8 votes

1 answer

614 views

Is constant-time compare really required for AEAD ciphers?

asked Aug 26, 2022 at 10:29

0 votes

1 answer

68 views

Meaning of the term "irreversible" for hashing

asked May 27, 2022 at 13:02

3 votes

1 answer

194 views

What's the use of storing R^2 with a public key?

asked Aug 2, 2021 at 16:08

2 votes

0 answers

64 views

What are the differences between the various Authenticated Encryption schemes using Keccak?

asked Jul 13, 2021 at 10:02

4 votes

0 answers

280 views

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

asked May 26, 2021 at 14:19

2 votes

2 answers

348 views

How does TLS with PQC use key encapsulation?

asked Mar 1, 2021 at 9:06

10 votes

0 answers

186 views

Do CCM and EAX provide key commitment?

asked Jan 25, 2021 at 15:57

2 votes

1 answer

67 views

Can you use a dynamic key and data size for KMAC?

asked Jan 13, 2021 at 12:16

5 votes

0 answers

135 views

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

asked Jan 6, 2021 at 14:08

5 votes

1 answer

390 views

What are the public key and output sizes for the four remaining PQC KEM candidates?

asked Dec 22, 2020 at 10:09

3 votes

2 answers

576 views

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

asked Sep 16, 2020 at 15:57

0 votes

0 answers

152 views

Security of CCM using 8 byte MAC within TLS

asked Aug 13, 2020 at 13:42

6 votes

2 answers

455 views

Using XOR to derive a data key for ECIES

asked Jul 24, 2020 at 9:58

5 votes

2 answers

2k views

What is the difference between data compression and compression in cryptographic algorithms?

asked May 17, 2020 at 20:38

2 votes

1 answer

308 views

Verify ECDSA signature without data

asked Mar 31, 2020 at 16:01

5 votes

1 answer

216 views

Use large key size for RC4 to avoid RC4 bias

asked Feb 25, 2020 at 11:42

2 votes

1 answer

47 views

Longer IV generation from a single block IV for ICBC

asked Feb 12, 2020 at 14:39

7 votes

2 answers

3k views

How to create an EC point from a plaintext message for encryption

asked Dec 10, 2019 at 23:07

2 votes

1 answer

57 views

Signature over MAC value for a random key

asked Dec 3, 2019 at 22:01

3 votes

0 answers

92 views

Using (EC)DH to generate a signature

asked Oct 17, 2019 at 21:07

7 votes

2 answers

1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

asked Jun 27, 2019 at 12:25

2 votes

2 answers

2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

asked May 21, 2019 at 16:09

6 votes

1 answer

451 views

Using a non-secure random generator for IV or salt generation

asked May 8, 2019 at 16:07

5 votes

2 answers

906 views

What's the reason for Monte Carlo tests for block ciphers?

asked Apr 10, 2019 at 15:30

1 vote

0 answers

123 views

Reason for including the public key of the key agreement in the KDF

asked Feb 14, 2019 at 2:16

7 votes

3 answers

3k views

Formal description of KDF1 and KDF2

asked Feb 13, 2019 at 19:29

Stack Exchange Network

102 Questions

Iteration count for (enhanced) Miller-Rabin

Which ciphers have been defined that use the Keccak sponge?

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

Validating an RSA public key

Is constant-time compare really required for AEAD ciphers?

Meaning of the term "irreversible" for hashing

What's the use of storing R^2 with a public key?

What are the differences between the various Authenticated Encryption schemes using Keccak?

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

How does TLS with PQC use key encapsulation?

Do CCM and EAX provide key commitment?

Can you use a dynamic key and data size for KMAC?

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

What are the public key and output sizes for the four remaining PQC KEM candidates?

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

Security of CCM using 8 byte MAC within TLS

Using XOR to derive a data key for ECIES

What is the difference between data compression and compression in cryptographic algorithms?

Verify ECDSA signature without data

Use large key size for RC4 to avoid RC4 bias

Longer IV generation from a single block IV for ICBC

How to create an EC point from a plaintext message for encryption

Signature over MAC value for a random key

Using (EC)DH to generate a signature

Is it possible to perform a meet-in-the-middle within a block cipher?

Preferred SHA-2 hash algorithm for MGF1 in RSA

Using a non-secure random generator for IV or salt generation

What's the reason for Monte Carlo tests for block ciphers?

Reason for including the public key of the key agreement in the KDF

Formal description of KDF1 and KDF2