Skip to main content
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes
Moderator
  • Member for 12 years, 7 months
  • Last seen this week
  • Doggerland II

38 Offered bounties for 3,150 reputation

3 votes
2 answers
113 views
+50

What are advantages/disadvantages of an invertible tweak schedule in a tweakable block cipher?

9 votes
1 answer
1k views
+100

Why is AES-SIV not used, but AESKW, AKW1?

5 votes
0 answers
198 views
+150

Is it possible to enhance white-box cryptography security by homomorphic encryption?

2 votes
1 answer
517 views
+50

How does padding in RSA prevent existenial forgery attacks in RSA?

2 votes
1 answer
501 views
+50

RSA small public exponent signature forgery - use part of the public key as ciphertext

3 votes
1 answer
361 views
+50

Collision finding method

3 votes
1 answer
884 views
+100

Digital Signatures with Curve25519 key-pair

7 votes
0 answers
287 views
+500

How many qubits are required to break classical Diffie-Hellman?

3 votes
0 answers
113 views
+50

Use of nonces in the SIGMA protocol and not in C(2e, 2s) of NIST SP800-56a?

2 votes
1 answer
243 views
+50

The Security of AES-N-GCM

19 votes
3 answers
2k views
+100

What is the difference between PRF and a Random Oracle?

8 votes
2 answers
1k views
+50

Is it possible to perform a meet-in-the-middle within a block cipher?

8 votes
1 answer
2k views
+100

What are the relations between cryptanalysis of block ciphers such as AES and Kendall's tau coefficient?

6 votes
2 answers
538 views
+50

DES and AES cryptography

5 votes
1 answer
2k views
+50

AES reverse Rijndael key schedule with decryption round keys

5 votes
1 answer
736 views
+50

What is this EC key derivation method called?

7 votes
1 answer
9k views
+50

Confusion and Diffusion in the AES functions

4 votes
1 answer
3k views
+50

How does openssl signature verification work?

1 vote
1 answer
3k views
+100

TLS 1.3: HKDF-Expand

16 votes
1 answer
746 views
+50

Selection of rotation constants in ARX design

8 votes
2 answers
3k views
+100

BER or DER X9.62 for ECDSA signature

11 votes
1 answer
1k views
+100

Collision resistance of hash function built on modular exponentiation

5 votes
2 answers
2k views
+50

Generation of strong primes

7 votes
2 answers
849 views
+100

Hashing list: concatenation vs prepending

16 votes
1 answer
7k views
+100

Relation between Key-exchange and Public-Key encryption schemes

4 votes
1 answer
460 views
+50

What’s the difference between a Fast wide pipe and a Narrow pipe construction?

5 votes
1 answer
3k views
+100

TLS 1.2 PRF with HMAC-SHA256

4 votes
1 answer
505 views
+100

Security effects of the seed's length in OAEP

9 votes
1 answer
2k views
+50

What is the original SKID3 protocol?

10 votes
0 answers
818 views
+100

Are there attacks against broken RSA signature pad checking with $e = 65537$?