User Maarten Bodewes - on strike - Cryptography Stack Exchange

97 votes

1 answer

159k views

What is the difference between PKCS#5 padding and PKCS#7 padding

asked Jul 4, 2013 at 21:18

36 votes

2 answers

26k views

Practical disadvantages of GCM mode encryption

asked Oct 4, 2013 at 22:13

28 votes

2 answers

20k views

Which attacks are possible against raw/textbook RSA?

asked Nov 7, 2014 at 15:59

25 votes

2 answers

13k views

Is RSA encryption with a private key the same as signature generation?

asked May 4, 2014 at 16:43

18 votes

3 answers

10k views

Modes of operation that allow padding oracle attacks

asked Jul 17, 2014 at 21:27

21 votes

1 answer

8k views

Reasons for Chinese SM2 Digital Signature Algorithm

asked Aug 22, 2013 at 11:08

12 votes

1 answer

6k views

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

asked Mar 31, 2012 at 13:53

16 votes

1 answer

5k views

Security of KDF1 and KDF2 (hash based KDF's)

asked Apr 19, 2014 at 16:41

12 votes

1 answer

5k views

Sending KCV (key check value) with cipher text

asked Feb 25, 2012 at 13:10

10 votes

1 answer

5k views

What is the algorithm behind PasswordDeriveBytes?

asked Jan 9, 2015 at 3:14

5 votes

1 answer

5k views

How to specify a NIST SP 800-108 KBKDF

asked Apr 26, 2014 at 15:30

4 votes

1 answer

4k views

RSA key pair generation using PRNG with same seed

asked Sep 6, 2013 at 22:59

11 votes

2 answers

3k views

Should HMAC-SHA3 be preferred over H(C(k,M))?

asked May 7, 2016 at 11:51

5 votes

1 answer

3k views

What are the differences between X9.31 RSA operation and PKCS#1 RSA operation?

asked Jul 6, 2016 at 9:17

8 votes

2 answers

3k views

BER or DER X9.62 for ECDSA signature

asked Apr 8, 2015 at 22:11

27 votes

1 answer

3k views

What is hardened SHA-1, how does it work and how much protection does it offer?

asked Feb 23, 2017 at 19:53

7 votes

2 answers

3k views

How to create an EC point from a plaintext message for encryption

asked Dec 10, 2019 at 23:07

11 votes

2 answers

3k views

Validating an RSA public key

asked Sep 21, 2022 at 13:16

7 votes

3 answers

3k views

Formal description of KDF1 and KDF2

asked Feb 13, 2019 at 19:29

4 votes

1 answer

3k views

Finding public exponent e

asked May 25, 2015 at 15:35

3 votes

1 answer

3k views

Streaming hash function

asked Feb 6, 2017 at 16:41

4 votes

1 answer

3k views

Whitening and randomness extraction

asked Jul 27, 2014 at 13:43

8 votes

1 answer

2k views

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

asked Oct 21, 2016 at 8:28

15 votes

2 answers

2k views

Given enough RSA signature values, is it possible to determine the public key value?

asked Mar 12, 2016 at 15:24

9 votes

1 answer

2k views

What are the constraints on using GCM with a tag size of 96 and 128 bits?

asked Aug 6, 2015 at 22:17

11 votes

1 answer

2k views

How random is the shared secret in the Diffie Hellman key agreement

asked Jul 24, 2013 at 23:45

2 votes

1 answer

2k views

EAX: OMAC and CMAC

asked Aug 26, 2014 at 9:32

5 votes

2 answers

2k views

What is the difference between data compression and compression in cryptographic algorithms?

asked May 17, 2020 at 20:38

2 votes

2 answers

2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

asked May 21, 2019 at 16:09

9 votes

1 answer

2k views

Practical uses of Manipulation Detection Code (MDC) and IGE

asked Jul 23, 2013 at 19:47

Stack Exchange Network

102 Questions

What is the difference between PKCS#5 padding and PKCS#7 padding

Practical disadvantages of GCM mode encryption

Which attacks are possible against raw/textbook RSA?

Is RSA encryption with a private key the same as signature generation?

Modes of operation that allow padding oracle attacks

Reasons for Chinese SM2 Digital Signature Algorithm

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

Security of KDF1 and KDF2 (hash based KDF's)

Sending KCV (key check value) with cipher text

What is the algorithm behind PasswordDeriveBytes?

How to specify a NIST SP 800-108 KBKDF

RSA key pair generation using PRNG with same seed

Should HMAC-SHA3 be preferred over H(C(k,M))?

What are the differences between X9.31 RSA operation and PKCS#1 RSA operation?

BER or DER X9.62 for ECDSA signature

What is hardened SHA-1, how does it work and how much protection does it offer?

How to create an EC point from a plaintext message for encryption

Validating an RSA public key

Formal description of KDF1 and KDF2

Finding public exponent e

Streaming hash function

Whitening and randomness extraction

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

Given enough RSA signature values, is it possible to determine the public key value?

What are the constraints on using GCM with a tag size of 96 and 128 bits?

How random is the shared secret in the Diffie Hellman key agreement

EAX: OMAC and CMAC

What is the difference between data compression and compression in cryptographic algorithms?

Preferred SHA-2 hash algorithm for MGF1 in RSA

Practical uses of Manipulation Detection Code (MDC) and IGE