User Maarten Bodewes

0 votes

0 answers

170 views

Security of CCM using 8 byte MAC within TLS

asked Aug 13, 2020 at 13:42

6 votes

2 answers

486 views

Using XOR to derive a data key for ECIES

asked Jul 24, 2020 at 9:58

5 votes

2 answers

2k views

What is the difference between data compression and compression in cryptographic algorithms?

asked May 17, 2020 at 20:38

2 votes

1 answer

357 views

Verify ECDSA signature without data

asked Mar 31, 2020 at 16:01

5 votes

1 answer

237 views

Use large key size for RC4 to avoid RC4 bias

asked Feb 25, 2020 at 11:42

2 votes

1 answer

47 views

Longer IV generation from a single block IV for ICBC

asked Feb 12, 2020 at 14:39

7 votes

2 answers

1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

asked Jun 27, 2019 at 12:25

36 votes

2 answers

27k views

Practical disadvantages of GCM mode encryption

asked Oct 4, 2013 at 22:13

99 votes

1 answer

164k views

What is the difference between PKCS#5 padding and PKCS#7 padding

asked Jul 4, 2013 at 21:18

2 votes

1 answer

61 views

Signature over MAC value for a random key

asked Dec 3, 2019 at 22:01

3 votes

0 answers

94 views

Using (EC)DH to generate a signature

asked Oct 17, 2019 at 21:07

5 votes

2 answers

1k views

What's the reason for Monte Carlo tests for block ciphers?

asked Apr 10, 2019 at 15:30

2 votes

2 answers

2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

asked May 21, 2019 at 16:09

6 votes

1 answer

488 views

Using a non-secure random generator for IV or salt generation

asked May 8, 2019 at 16:07

3 votes

1 answer

195 views

Authenticate encrypted seed for KEM + AEAD hybrid cryptosystem

asked Sep 8, 2015 at 21:10

9 votes

1 answer

2k views

What are the constraints on using GCM with a tag size of 96 and 128 bits?

asked Aug 6, 2015 at 22:17

3 votes

1 answer

545 views

Bitwise method of generating r for RSA-KEM

asked Mar 28, 2016 at 14:29

21 votes

1 answer

9k views

Reasons for Chinese SM2 Digital Signature Algorithm

asked Aug 22, 2013 at 11:08

7 votes

3 answers

3k views

Formal description of KDF1 and KDF2

asked Feb 13, 2019 at 19:29

1 vote

0 answers

129 views

Reason for including the public key of the key agreement in the KDF

asked Feb 14, 2019 at 2:16

5 votes

1 answer

513 views

GCM: Math behind update of AAD after ciphertext has been processed

asked Sep 16, 2014 at 13:06

5 votes

1 answer

231 views

Combining classical attacks and quantum cryptanalysis

asked Oct 24, 2018 at 19:33

3 votes

1 answer

115 views

Could we use a more efficient hash for signature generation?

asked Oct 20, 2018 at 13:29

3 votes

1 answer

178 views

Can length extension attacks be avoided by a single bit flip?

asked Sep 26, 2018 at 10:36

10 votes

2 answers

828 views

Which attacks are prevented by the different initial hash values for SHA-2 with truncated output?

asked Jul 20, 2018 at 12:58

8 votes

2 answers

3k views

BER or DER X9.62 for ECDSA signature

asked Apr 8, 2015 at 22:11

0 votes

1 answer

214 views

RSA-KEM: minimal number of random bits

asked Nov 17, 2017 at 16:08

2 votes

2 answers

527 views

Advantages of using intermediate hash over full hash in digital signature application

asked Sep 3, 2014 at 10:26

16 votes

1 answer

5k views

Security of KDF1 and KDF2 (hash based KDF's)

asked Apr 19, 2014 at 16:41

1 vote

0 answers

53 views

MAC with key supplied afterwards

asked Mar 12, 2018 at 20:16

Stack Exchange Network

104 Questions

Security of CCM using 8 byte MAC within TLS

Using XOR to derive a data key for ECIES

What is the difference between data compression and compression in cryptographic algorithms?

Verify ECDSA signature without data

Use large key size for RC4 to avoid RC4 bias

Longer IV generation from a single block IV for ICBC

Is it possible to perform a meet-in-the-middle within a block cipher?

Practical disadvantages of GCM mode encryption

What is the difference between PKCS#5 padding and PKCS#7 padding

Signature over MAC value for a random key

Using (EC)DH to generate a signature

What's the reason for Monte Carlo tests for block ciphers?

Preferred SHA-2 hash algorithm for MGF1 in RSA

Using a non-secure random generator for IV or salt generation

Authenticate encrypted seed for KEM + AEAD hybrid cryptosystem

What are the constraints on using GCM with a tag size of 96 and 128 bits?

Bitwise method of generating r for RSA-KEM

Reasons for Chinese SM2 Digital Signature Algorithm

Formal description of KDF1 and KDF2

Reason for including the public key of the key agreement in the KDF

GCM: Math behind update of AAD after ciphertext has been processed

Combining classical attacks and quantum cryptanalysis

Could we use a more efficient hash for signature generation?

Can length extension attacks be avoided by a single bit flip?

Which attacks are prevented by the different initial hash values for SHA-2 with truncated output?

BER or DER X9.62 for ECDSA signature

RSA-KEM: minimal number of random bits

Advantages of using intermediate hash over full hash in digital signature application

Security of KDF1 and KDF2 (hash based KDF's)

MAC with key supplied afterwards