Skip to main content
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes
Moderator
  • Member for 12 years, 6 months
  • Last seen this week
  • Doggerland II
3 votes
2 answers
792 views

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

0 votes
0 answers
189 views

Security of CCM using 8 byte MAC within TLS

6 votes
2 answers
514 views

Using XOR to derive a data key for ECIES

5 votes
2 answers
2k views

What is the difference between data compression and compression in cryptographic algorithms?

2 votes
1 answer
386 views

Verify ECDSA signature without data

5 votes
1 answer
265 views

Use large key size for RC4 to avoid RC4 bias

2 votes
1 answer
49 views

Longer IV generation from a single block IV for ICBC

8 votes
2 answers
1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

36 votes
2 answers
27k views

Practical disadvantages of GCM mode encryption

99 votes
1 answer
169k views

What is the difference between PKCS#5 padding and PKCS#7 padding

2 votes
1 answer
64 views

Signature over MAC value for a random key

3 votes
0 answers
97 views

Using (EC)DH to generate a signature

5 votes
2 answers
1k views

What's the reason for Monte Carlo tests for block ciphers?

2 votes
2 answers
2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

6 votes
1 answer
545 views

Using a non-secure random generator for IV or salt generation

3 votes
1 answer
203 views

Authenticate encrypted seed for KEM + AEAD hybrid cryptosystem

9 votes
1 answer
2k views

What are the constraints on using GCM with a tag size of 96 and 128 bits?

3 votes
1 answer
555 views

Bitwise method of generating r for RSA-KEM

21 votes
1 answer
9k views

Reasons for Chinese SM2 Digital Signature Algorithm

7 votes
3 answers
3k views

Formal description of KDF1 and KDF2

1 vote
0 answers
141 views

Reason for including the public key of the key agreement in the KDF

5 votes
1 answer
516 views

GCM: Math behind update of AAD after ciphertext has been processed

5 votes
1 answer
236 views

Combining classical attacks and quantum cryptanalysis

3 votes
1 answer
122 views

Could we use a more efficient hash for signature generation?

3 votes
1 answer
201 views

Can length extension attacks be avoided by a single bit flip?

10 votes
2 answers
847 views

Which attacks are prevented by the different initial hash values for SHA-2 with truncated output?

8 votes
2 answers
3k views

BER or DER X9.62 for ECDSA signature

0 votes
1 answer
223 views

RSA-KEM: minimal number of random bits

2 votes
2 answers
564 views

Advantages of using intermediate hash over full hash in digital signature application

16 votes
1 answer
5k views

Security of KDF1 and KDF2 (hash based KDF's)