User Maarten Bodewes - on strike - Cryptography Stack Exchange

7 votes

0 answers

257 views

How many qubits are required to break classical Diffie-Hellman?

asked Aug 15, 2018 at 13:29

7 votes

2 answers

470 views

MAC where key is provided afterwards

asked Dec 5, 2016 at 21:44

7 votes

2 answers

553 views

Turning a 64 bit block cipher into a 128 bit block cipher

asked Jun 18, 2015 at 20:03

7 votes

1 answer

652 views

Are there any differences in operation between existing Diffie-Hellman specifications?

asked Oct 30, 2013 at 16:12

6 votes

2 answers

418 views

Fast post-processing for broken RDRAND

asked Sep 17, 2013 at 10:48

6 votes

1 answer

212 views

Streaming mode of operation that is more resistant against nonce reuse

asked Aug 10, 2014 at 17:57

6 votes

1 answer

741 views

Advantages of RSA / EC against QC attacks

asked Oct 18, 2016 at 8:38

6 votes

1 answer

1k views

Normalization of points on an Elliptic Curve

asked May 1, 2017 at 16:21

6 votes

2 answers

455 views

Using XOR to derive a data key for ECIES

asked Jul 24, 2020 at 9:58

6 votes

1 answer

451 views

Using a non-secure random generator for IV or salt generation

asked May 8, 2019 at 16:07

5 votes

2 answers

906 views

What's the reason for Monte Carlo tests for block ciphers?

asked Apr 10, 2019 at 15:30

5 votes

1 answer

227 views

Combining classical attacks and quantum cryptanalysis

asked Oct 24, 2018 at 19:33

5 votes

0 answers

135 views

Upgrading key derivation by adding an XOR with a known value

asked Nov 23, 2018 at 11:37

5 votes

1 answer

216 views

Use large key size for RC4 to avoid RC4 bias

asked Feb 25, 2020 at 11:42

5 votes

2 answers

2k views

What is the difference between data compression and compression in cryptographic algorithms?

asked May 17, 2020 at 20:38

5 votes

1 answer

390 views

What are the public key and output sizes for the four remaining PQC KEM candidates?

asked Dec 22, 2020 at 10:09

5 votes

0 answers

135 views

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

asked Jan 6, 2021 at 14:08

5 votes

1 answer

713 views

What's the difference between DH and DHM?

asked Jan 4, 2017 at 1:21

5 votes

1 answer

3k views

What are the differences between X9.31 RSA operation and PKCS#1 RSA operation?

asked Jul 6, 2016 at 9:17

5 votes

1 answer

823 views

Can MGF1 within OAEP and PSS be replaced by a XOF?

asked Jul 15, 2016 at 11:29

5 votes

2 answers

352 views

CSPRNG that cannot be used as random extractor

asked Jul 27, 2014 at 13:32

5 votes

1 answer

507 views

GCM: Math behind update of AAD after ciphertext has been processed

asked Sep 16, 2014 at 13:06

5 votes

1 answer

5k views

How to specify a NIST SP 800-108 KBKDF

asked Apr 26, 2014 at 15:30

4 votes

1 answer

226 views

Generating unsigned, bounded random value using signed bounded random values

asked May 12, 2014 at 15:39

4 votes

1 answer

4k views

RSA key pair generation using PRNG with same seed

asked Sep 6, 2013 at 22:59

4 votes

0 answers

1k views

Symmetric encryption mode where ciphertext size is plain text size [duplicate]

asked Feb 22, 2013 at 12:56

4 votes

1 answer

3k views

Whitening and randomness extraction

asked Jul 27, 2014 at 13:43

4 votes

1 answer

545 views

Exposed raw RSA private key operation

asked Mar 24, 2016 at 9:58

4 votes

1 answer

3k views

Finding public exponent e

asked May 25, 2015 at 15:35

4 votes

1 answer

441 views

Performing HMAC with random key before MAC comparison

asked Jan 17, 2015 at 15:27

Stack Exchange Network

102 Questions

How many qubits are required to break classical Diffie-Hellman?

MAC where key is provided afterwards

Turning a 64 bit block cipher into a 128 bit block cipher

Are there any differences in operation between existing Diffie-Hellman specifications?

Fast post-processing for broken RDRAND

Streaming mode of operation that is more resistant against nonce reuse

Advantages of RSA / EC against QC attacks

Normalization of points on an Elliptic Curve

Using XOR to derive a data key for ECIES

Using a non-secure random generator for IV or salt generation

What's the reason for Monte Carlo tests for block ciphers?

Combining classical attacks and quantum cryptanalysis

Upgrading key derivation by adding an XOR with a known value

Use large key size for RC4 to avoid RC4 bias

What is the difference between data compression and compression in cryptographic algorithms?

What are the public key and output sizes for the four remaining PQC KEM candidates?

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

What's the difference between DH and DHM?

What are the differences between X9.31 RSA operation and PKCS#1 RSA operation?

Can MGF1 within OAEP and PSS be replaced by a XOF?

CSPRNG that cannot be used as random extractor

GCM: Math behind update of AAD after ciphertext has been processed

How to specify a NIST SP 800-108 KBKDF

Generating unsigned, bounded random value using signed bounded random values

RSA key pair generation using PRNG with same seed

Symmetric encryption mode where ciphertext size is plain text size [duplicate]

Whitening and randomness extraction

Exposed raw RSA private key operation

Finding public exponent e

Performing HMAC with random key before MAC comparison