Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes
Moderator
  • Member for 11 years, 10 months
  • Last seen this week
  • Doggerland II
0 votes
0 answers
160 views

Security of CCM using 8 byte MAC within TLS

6 votes
2 answers
472 views

Using XOR to derive a data key for ECIES

5 votes
2 answers
2k views

What is the difference between data compression and compression in cryptographic algorithms?

2 votes
1 answer
346 views

Verify ECDSA signature without data

5 votes
1 answer
223 views

Use large key size for RC4 to avoid RC4 bias

2 votes
1 answer
47 views

Longer IV generation from a single block IV for ICBC

7 votes
2 answers
1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

36 votes
2 answers
26k views

Practical disadvantages of GCM mode encryption

98 votes
1 answer
162k views

What is the difference between PKCS#5 padding and PKCS#7 padding

2 votes
1 answer
57 views

Signature over MAC value for a random key

3 votes
0 answers
94 views

Using (EC)DH to generate a signature

5 votes
2 answers
988 views

What's the reason for Monte Carlo tests for block ciphers?

2 votes
2 answers
2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

6 votes
1 answer
469 views

Using a non-secure random generator for IV or salt generation

3 votes
1 answer
194 views

Authenticate encrypted seed for KEM + AEAD hybrid cryptosystem

9 votes
1 answer
2k views

What are the constraints on using GCM with a tag size of 96 and 128 bits?

3 votes
1 answer
542 views

Bitwise method of generating r for RSA-KEM

21 votes
1 answer
8k views

Reasons for Chinese SM2 Digital Signature Algorithm

7 votes
3 answers
3k views

Formal description of KDF1 and KDF2

1 vote
0 answers
127 views

Reason for including the public key of the key agreement in the KDF

5 votes
1 answer
509 views

GCM: Math behind update of AAD after ciphertext has been processed

5 votes
1 answer
230 views

Combining classical attacks and quantum cryptanalysis

3 votes
1 answer
114 views

Could we use a more efficient hash for signature generation?

3 votes
1 answer
173 views

Can length extension attacks be avoided by a single bit flip?

10 votes
2 answers
807 views

Which attacks are prevented by the different initial hash values for SHA-2 with truncated output?

8 votes
2 answers
3k views

BER or DER X9.62 for ECDSA signature

0 votes
1 answer
213 views

RSA-KEM: minimal number of random bits

2 votes
2 answers
517 views

Advantages of using intermediate hash over full hash in digital signature application

16 votes
1 answer
5k views

Security of KDF1 and KDF2 (hash based KDF's)

1 vote
0 answers
53 views

MAC with key supplied afterwards