User Maarten Bodewes

6

votes

1

answer

668

views

What is the difference between Argon2d and Argon2i?

Sep 23 '19 at 7:56 Patriot 2,321

3

votes

1

answer

142

views

Multiparty millionaire problem where members only know if they are the richest one

multiparty-computation

Sep 11 '19 at 13:57 Martin Kromm 387

14

votes

7

answers

6k

views

Can I say “I have encrypted something” if I hash something?

encryption hash terminology

Sep 11 '19 at 9:54 eckes 606

3

votes

1

answer

199

views

Decrypting arbitrary numbers with RSA

rsa key-exchange

Aug 19 '19 at 14:56 fgrieu♦ 110k

14

votes

2

answers

2k

views

Is it safe to reuse a ECDSA nonce for two signatures if the public keys are different?

public-key elliptic-curves cryptanalysis signature dsa

Jul 31 '19 at 10:28 Ilmari Karonen 42k

37

votes

3

answers

7k

views

Does “Shattered” actually show SHA-1-signed certificates are “unsafe”?

collision-resistance sha-1 certificates

Jul 30 '19 at 20:05 Peter Green 1,069

7

votes

1

answer

349

views

How safe is a prime with $P=2 \cdot Q \cdot R \cdot S \cdot t+1$ for discrete logarithm? How to enhance/compare?

cryptanalysis discrete-logarithm attack

Jul 20 '19 at 21:01 J. Doe 537

2

votes

1

answer

59

views

Serpent intermediate rounds differs from example code, but result is still correct, is it a problem?

implementation serpent

May 11 '19 at 6:13 user96649 163

2

votes

1

answer

235

views

How does the Signature Scheme in Picnic Works

signature zero-knowledge-proofs post-quantum-cryptography nist

May 8 '19 at 2:15 redplum 346

3

votes

0

answers

55

views

Difference in SKIPJACK algorithms

history skipjack

Apr 27 '19 at 5:06 Community♦ 1

5

votes

0

answers

628

views

How does post quantum key exchange in OpenSSH 8 work?

elliptic-curves diffie-hellman post-quantum-cryptography

Apr 25 '19 at 15:29 xkcd 261

1

vote

0

answers

124

views

Overcome MD5-RSA Signature verification

hash rsa signature md5

Apr 12 '19 at 13:19 Donut 375

4

votes

1

answer

115

views

The small key-search circuit for brute-force of Bernstein

aes brute-force-attack

Apr 11 '19 at 4:11 Squeamish Ossifrage 42.9k

1

vote

0

answers

117

views

Strongswan KDF Test

encryption key-derivation

Apr 4 '19 at 23:00 neutrino 11

11

votes

2

answers

2k

views

KCV and compatibility with block cipher modes of operation

symmetric known-plaintext-attack key-check-value

Apr 2 '19 at 15:36 Maarten Bodewes♦ 77.3k

9

votes

2

answers

399

views

How should I incrementally sign a large set of documents?

hash signature collision-resistance

Mar 4 '19 at 23:22 Joel Dice 101

3

votes

2

answers

596

views

Performance metrices of cryptographic algorithms

performance

Mar 1 '19 at 8:58 Community♦ 1

8

votes

1

answer

1k

views

What are the constraints on using GCM with a tag size of 96 and 128 bits?

encryption aes modes-of-operation authenticated-encryption gcm

Feb 27 '19 at 16:51 Squeamish Ossifrage 42.9k

3

votes

1

answer

214

views

Cloneability of AES-128

aes public-key

Feb 26 '19 at 2:26 Maarten Bodewes♦ 77.3k

7

votes

1

answer

293

views

Is it important to defend against key substitution attack in ECDSA?

elliptic-curves signature dsa

Feb 21 '19 at 18:43 Squeamish Ossifrage 42.9k

2

votes

1

answer

167

views

Hash for use in embedded HMAC application

hash hmac mac embedded

Feb 20 '19 at 17:41 Squeamish Ossifrage 42.9k

6

votes

3

answers

349

views

Bounding security of password authentication given entropy

passwords

Feb 19 '19 at 16:34 Squeamish Ossifrage 42.9k

24

votes

2

answers

5k

views

Does the Balloon hashing paper deprecate Argon2?

password-hashing argon2 balloon

Feb 16 '19 at 0:56 yanjuna 93

6

votes

3

answers

1k

views

Formal description of KDF1 and KDF2

key-exchange key-derivation standards

Feb 14 '19 at 18:17 Community♦ 1

7

votes

1

answer

203

views

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

keys s-boxes twofish

Feb 12 '19 at 16:47 Paul Uszak 12k

7

votes

2

answers

129

views

Does there exist a mode of operation that forces mac-then-decrypt?

authenticated-encryption modes-of-operation

Feb 6 '19 at 18:30 Jon Callas 2,036

2

votes

1

answer

224

views

Does Java SunJCE Provider use AES for encrypting nonce in Poly1305?

aes poly1305

Feb 3 '19 at 11:28 Maarten Bodewes♦ 77.3k

8

votes

2

answers

800

views

Geometric interpretation of an Edwards curve

elliptic-curves

Jan 7 '19 at 16:33 Youssef El Housni 604

5

votes

1

answer

212

views

Are EC public key values evenly distributed?

elliptic-curves

Jan 5 '19 at 9:00 Maarten Bodewes♦ 77.3k

8

votes

1

answer

274

views

Why would the use of Curve25519 in Dragonfly leak information?

elliptic-curves key-exchange pake

Jan 4 '19 at 3:36 poncho 117k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

283 Bookmarks

What is the difference between Argon2d and Argon2i?

Multiparty millionaire problem where members only know if they are the richest one

Can I say “I have encrypted something” if I hash something?

Decrypting arbitrary numbers with RSA

Is it safe to reuse a ECDSA nonce for two signatures if the public keys are different?

Does “Shattered” actually show SHA-1-signed certificates are “unsafe”?

How safe is a prime with $P=2 \cdot Q \cdot R \cdot S \cdot t+1$ for discrete logarithm? How to enhance/compare?

Serpent intermediate rounds differs from example code, but result is still correct, is it a problem?

How does the Signature Scheme in Picnic Works

Difference in SKIPJACK algorithms

How does post quantum key exchange in OpenSSH 8 work?

Overcome MD5-RSA Signature verification

The small key-search circuit for brute-force of Bernstein

Strongswan KDF Test

KCV and compatibility with block cipher modes of operation

How should I incrementally sign a large set of documents?

Performance metrices of cryptographic algorithms

What are the constraints on using GCM with a tag size of 96 and 128 bits?

Cloneability of AES-128

Is it important to defend against key substitution attack in ECDSA?

Hash for use in embedded HMAC application

Bounding security of password authentication given entropy

Does the Balloon hashing paper deprecate Argon2?

Formal description of KDF1 and KDF2

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

Does there exist a mode of operation that forces mac-then-decrypt?

Does Java SunJCE Provider use AES for encrypting nonce in Poly1305?

Geometric interpretation of an Edwards curve

Are EC public key values evenly distributed?

Why would the use of Curve25519 in Dragonfly leak information?