User Maarten Bodewes

1 vote

0 answers

66 views

Two-party randomness for KEM

asked Sep 4 at 11:46

1 vote

2 answers

127 views

Why does ECIES use "Key Encapsulation"? Does it?

asked Sep 1 at 11:24

5 votes

2 answers

5k views

How to specify a NIST SP 800-108 KBKDF

asked Apr 26, 2014 at 15:30

7 votes

2 answers

3k views

How to create an EC point from a plaintext message for encryption

asked Dec 10, 2019 at 23:07

2 votes

1 answer

97 views

Iteration count for (enhanced) Miller-Rabin

asked Feb 16 at 15:21

4 votes

1 answer

84 views

Which ciphers have been defined that use the Keccak sponge?

asked Jan 26 at 16:59

4 votes

0 answers

310 views

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

asked May 26, 2021 at 14:19

1 vote

1 answer

120 views

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

asked Jan 9 at 15:39

12 votes

1 answer

6k views

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

asked Mar 31, 2012 at 13:53

11 votes

2 answers

3k views

Validating an RSA public key

asked Sep 21, 2022 at 13:16

8 votes

1 answer

638 views

Is constant-time compare really required for AEAD ciphers?

asked Aug 26, 2022 at 10:29

8 votes

1 answer

3k views

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

asked Oct 21, 2016 at 8:28

15 votes

2 answers

3k views

Given enough RSA signature values, is it possible to determine the public key value?

asked Mar 12, 2016 at 15:24

12 votes

1 answer

5k views

Sending KCV (key check value) with cipher text

asked Feb 25, 2012 at 13:10

0 votes

1 answer

84 views

Meaning of the term "irreversible" for hashing

asked May 27, 2022 at 13:02

27 votes

1 answer

3k views

What is hardened SHA-1, how does it work and how much protection does it offer?

asked Feb 23, 2017 at 19:53

5 votes

0 answers

138 views

Upgrading key derivation by adding an XOR with a known value

asked Nov 23, 2018 at 11:37

3 votes

1 answer

257 views

What's the use of storing R^2 with a public key?

asked Aug 2, 2021 at 16:08

25 votes

2 answers

14k views

Is RSA encryption with a private key the same as signature generation?

asked May 4, 2014 at 16:43

2 votes

0 answers

65 views

What are the differences between the various Authenticated Encryption schemes using Keccak?

asked Jul 13, 2021 at 10:02

2 votes

2 answers

284 views

What does OIW stand for

asked Oct 3, 2014 at 16:03

2 votes

2 answers

398 views

How does TLS with PQC use key encapsulation?

asked Mar 1, 2021 at 9:06

10 votes

0 answers

194 views

Do CCM and EAX provide key commitment?

asked Jan 25, 2021 at 15:57

2 votes

1 answer

73 views

Can you use a dynamic key and data size for KMAC?

asked Jan 13, 2021 at 12:16

9 votes

1 answer

796 views

Can Whirlpool take advantage of AES-NI?

asked Nov 10, 2016 at 9:52

5 votes

0 answers

141 views

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

asked Jan 6, 2021 at 14:08

5 votes

1 answer

441 views

What are the public key and output sizes for the four remaining PQC KEM candidates?

asked Dec 22, 2020 at 10:09

28 votes

2 answers

21k views

Which attacks are possible against raw/textbook RSA?

asked Nov 7, 2014 at 15:59

7 votes

0 answers

266 views

How many qubits are required to break classical Diffie-Hellman?

asked Aug 15, 2018 at 13:29

3 votes

2 answers

652 views

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

asked Sep 16, 2020 at 15:57

Stack Exchange Network

104 Questions

Two-party randomness for KEM

Why does ECIES use "Key Encapsulation"? Does it?

How to specify a NIST SP 800-108 KBKDF

How to create an EC point from a plaintext message for encryption

Iteration count for (enhanced) Miller-Rabin

Which ciphers have been defined that use the Keccak sponge?

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

Validating an RSA public key

Is constant-time compare really required for AEAD ciphers?

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

Given enough RSA signature values, is it possible to determine the public key value?

Sending KCV (key check value) with cipher text

Meaning of the term "irreversible" for hashing

What is hardened SHA-1, how does it work and how much protection does it offer?

Upgrading key derivation by adding an XOR with a known value

What's the use of storing R^2 with a public key?

Is RSA encryption with a private key the same as signature generation?

What are the differences between the various Authenticated Encryption schemes using Keccak?

What does OIW stand for

How does TLS with PQC use key encapsulation?

Do CCM and EAX provide key commitment?

Can you use a dynamic key and data size for KMAC?

Can Whirlpool take advantage of AES-NI?

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

What are the public key and output sizes for the four remaining PQC KEM candidates?

Which attacks are possible against raw/textbook RSA?

How many qubits are required to break classical Diffie-Hellman?

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?