user avatar
user avatar
user avatar
Maarten Bodewes
Moderator
  • Member for 10 years, 5 months
  • Last seen this week
  • In my head
2 answers
102 votes
19k views
36 bookmarks
What is the new attack on SHA-1 "SHAttered" and how does it work?
4 answers
87 votes
99k views
38 bookmarks
What are the practical differences between 256-bit, 192-bit, and 128-bit AES encryption?
3 answers
53 votes
106k views
40 bookmarks
RSA encryption with private key and decryption with a public key
3 answers
52 votes
54k views
27 bookmarks
Why hash the message before signing it with RSA?
3 answers
37 votes
8k views
14 bookmarks
Does "Shattered" actually show SHA-1-signed certificates are "unsafe"?
4 answers
36 votes
41k views
17 bookmarks
Why is CBC with predictable IV considered insecure against chosen-plaintext attack?
2 answers
30 votes
6k views
14 bookmarks
AES-GCM Disadvantage
2 answers
29 votes
5k views
7 bookmarks
Blum Blum Shub vs. AES-CTR or other CSPRNGs
2 answers
27 votes
2k views
3 bookmarks
Why did TLS 1.3 prohibit PGP authentication?
7 answers
26 votes
6k views
7 bookmarks
Does Terra Quantum AG break AES and Hash Algorithms?
2 answers
26 votes
17k views
14 bookmarks
Which attacks are possible against raw/textbook RSA?
2 answers
24 votes
6k views
11 bookmarks
Does the Balloon hashing paper deprecate Argon2?
2 answers
24 votes
12k views
11 bookmarks
Is RSA encryption with a private key the same as signature generation?
2 answers
24 votes
30k views
16 bookmarks
Key derivation functions (KDF): What are? Main purposes? How can they be used?
3 answers
23 votes
3k views
16 bookmarks
How to publish a cipher (concept)?
0 answers
23 votes
888 views
8 bookmarks
Memory-hard password hash in practice?
3 answers
22 votes
4k views
7 bookmarks
Is there an AES identity key?
2 answers
22 votes
13k views
5 bookmarks
What size should the HMAC key be with SHA-256?
1 answer
21 votes
15k views
4 bookmarks
Difference between Rijndael 128 / 256 blocksize implementations? (and impact of block size in general)
1 answer
21 votes
2k views
7 bookmarks
Security of RSA for paranoids with padding?
5 answers
20 votes
5k views
11 bookmarks
Are there cryptographic hash functions that can be computed using only paper and pen without leaking any information about the plaintext?
4 answers
20 votes
5k views
6 bookmarks
Is compressing data prior to encryption necessary to reduce plaintext redundancy?
1 answer
20 votes
12k views
7 bookmarks
How many qubits are required to break RSA 2048 or 4096 with a universal quantum computer?
1 answer
19 votes
2k views
3 bookmarks
Compressing EC private keys
1 answer
19 votes
816 views
10 bookmarks
Quantum complexity of LWE
2 answers
19 votes
1k views
9 bookmarks
Practical differences between circuits and turing machines for cryptography
2 answers
19 votes
976 views
5 bookmarks
Is there any SRP-like key exchange only using "standard" cryptographic primitives?
1 answer
18 votes
2k views
6 bookmarks
What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?
1 answer
18 votes
1k views
8 bookmarks
What is the new attack on OCB2 and how does it work?
5 answers
17 votes
3k views
6 bookmarks
Creating a small number from a random octet string
1
2 3 4 5
10