User Maarten Bodewes

20

votes

2

answers

11k

views

What size should the HMAC key be with SHA-256?

Jan 19 at 17:28 Maarten Bodewes♦ 76.4k

20

votes

3

answers

3k

views

Is there an AES identity key?

aes

Jan 19 at 14:15 benrg 233

5

votes

0

answers

74

views

Is Argon2 “sequential memory hard”?

scrypt argon2 memory-hard

Jan 5 at 22:39 Modal Nest 1,336

22

votes

2

answers

12k

views

Which attacks are possible against raw/textbook RSA?

rsa cryptanalysis padding

Dec 7 at 20:12 fgrieu♦ 109k

3

votes

0

answers

50

views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

hash hmac lightweight gimli

Dec 1 at 5:00 DannyNiu 4,260

4

votes

1

answer

364

views

Is CMAC vulnerable to length extension attacks?

mac length-extension cmac

Nov 25 at 21:16 poncho 116k

0

votes

1

answer

61

views

The modes of encryption preserve the format

encryption block-cipher format-preserving

Nov 25 at 14:21 Maarten Bodewes♦ 76.4k

0

votes

0

answers

131

views

Does this qualify as a one-way function?

collision-resistance one-way-function preimage-resistance

Nov 21 at 10:00 Sir Galahad 45

5

votes

2

answers

562

views

What is the one-time signature scheme with shortest signature size known?

signature

Nov 20 at 18:26 Community♦ 1

3

votes

0

answers

78

views

How to decide which diffusion scheme is better for a block cipher design

block-cipher diffusion mds

Oct 13 at 13:03 kelalaka 29.5k

10

votes

3

answers

1k

views

What is the most computationally efficient way of generating pseudo-random permutations?

block-cipher format-preserving pseudo-random-permutation

Oct 9 at 11:29 kelalaka 29.5k

5

votes

1

answer

79

views

The Rationale behind NIST's counter/LFSR recommendation on deterministic IV constructions on SP 800-38D

aes random-number-generator initialization-vector aes-gcm

Oct 6 at 14:36 kelalaka 29.5k

13

votes

3

answers

2k

views

How are points on an elliptic curve discretized?

elliptic-curves

Aug 29 at 19:32 fgrieu♦ 109k

3

votes

0

answers

67

views

Use of nonces in the SIGMA protocol and not in C(2e, 2s) of NIST SP800-56a?

protocol-design key-exchange nonce

Aug 15 at 12:07 Maarten Bodewes♦ 76.4k

2

votes

1

answer

191

views

The Security of AES-N-GCM

aes gcm aes-gcm

Jul 6 at 7:21 Pete 21

46

votes

3

answers

45k

views

Why hash the message before signing it with RSA?

hash rsa signature protocol-analysis forgery

Jul 5 at 14:52 R1w 1,596

1

vote

0

answers

33

views

Fixed variable in Groth16

zero-knowledge-proofs pairings circuit snarks

Jun 23 at 23:46 Binou 354

12

votes

0

answers

202

views

RSA key such that pi deciphers to your name per RSA-OAEP

rsa oaep

May 29 at 6:59 fgrieu♦ 109k

3

votes

0

answers

145

views

Security of ECC over finite fields of characteristic $p\approx2^{50\pm10}$?

elliptic-curves

Apr 14 at 14:30 fgrieu♦ 109k

34

votes

4

answers

33k

views

Why is CBC with predictable IV considered insecure against chosen-plaintext attack?

encryption cbc initialization-vector chosen-plaintext-attack

Apr 14 at 9:41 kelalaka 29.5k

20

votes

2

answers

9k

views

Is RSA encryption with a private key the same as signature generation?

encryption rsa public-key signature

Apr 2 at 16:27 Maarten Bodewes♦ 76.4k

3

votes

2

answers

116

views

Bleichenbacher-attack test vectors

chosen-ciphertext-attack pkcs1

Mar 19 at 23:51 Maarten Bodewes♦ 76.4k

3

votes

1

answer

100

views

Understanding definition of secure pseudo random number generator

pseudo-random-generator

Mar 13 at 1:07 Community♦ 1

3

votes

1

answer

68

views

Can the input to a one way function be pseudorandom?

pseudo-random-generator one-way-function

Mar 4 at 23:23 Community♦ 1

1

vote

3

answers

72

views

Calculate the complexity of HKDF with a 96bit salt and a 128bit key?

complexity salt hkdf

Mar 1 at 1:31 Maarten Bodewes♦ 76.4k

2

votes

1

answer

259

views

Are RSA-PSS parameters standardized?

standards fips-140 rsa-pss

Feb 27 at 11:08 Maarten Bodewes♦ 76.4k

3

votes

1

answer

148

views

Insecure MAC built on pseudorandom function

cryptanalysis mac pseudo-random-function

Feb 23 '20 at 16:41 Maarten Bodewes♦ 76.4k

2

votes

1

answer

164

views

Why is there no “ephemeral non-DH EC” key exchange in TLS?

rsa diffie-hellman key-exchange tls

Feb 19 '20 at 14:04 Maarten Bodewes♦ 76.4k

5

votes

1

answer

3k

views

Building a combined encryption scheme from two encryption schemes that's secure if at least on of them is secure

encryption provable-security chosen-plaintext-attack

Feb 13 '20 at 12:38 kelalaka 29.5k

19

votes

2

answers

811

views

Is there any SRP-like key exchange only using “standard” cryptographic primitives?

key-exchange password-based-encryption srp

Feb 12 '20 at 14:03 Faulst 802

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

280 Bookmarks

What size should the HMAC key be with SHA-256?

Is there an AES identity key?

Is Argon2 “sequential memory hard”?

Which attacks are possible against raw/textbook RSA?

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

Is CMAC vulnerable to length extension attacks?

The modes of encryption preserve the format

Does this qualify as a one-way function?

What is the one-time signature scheme with shortest signature size known?

How to decide which diffusion scheme is better for a block cipher design

What is the most computationally efficient way of generating pseudo-random permutations?

The Rationale behind NIST's counter/LFSR recommendation on deterministic IV constructions on SP 800-38D

How are points on an elliptic curve discretized?

Use of nonces in the SIGMA protocol and not in C(2e, 2s) of NIST SP800-56a?

The Security of AES-N-GCM

Why hash the message before signing it with RSA?

Fixed variable in Groth16

RSA key such that pi deciphers to your name per RSA-OAEP

Security of ECC over finite fields of characteristic $p\approx2^{50\pm10}$?

Why is CBC with predictable IV considered insecure against chosen-plaintext attack?

Is RSA encryption with a private key the same as signature generation?

Bleichenbacher-attack test vectors

Understanding definition of secure pseudo random number generator

Can the input to a one way function be pseudorandom?

Calculate the complexity of HKDF with a 96bit salt and a 128bit key?

Are RSA-PSS parameters standardized?

Insecure MAC built on pseudorandom function

Why is there no “ephemeral non-DH EC” key exchange in TLS?

Building a combined encryption scheme from two encryption schemes that's secure if at least on of them is secure

Is there any SRP-like key exchange only using “standard” cryptographic primitives?