User Maarten Bodewes

1 vote

0 answers

66 views

Two-party randomness for KEM

asked Sep 4 at 11:46

1 vote

2 answers

127 views

Why does ECIES use "Key Encapsulation"? Does it?

asked Sep 1 at 11:24

2 votes

1 answer

97 views

Iteration count for (enhanced) Miller-Rabin

asked Feb 16 at 15:21

4 votes

1 answer

84 views

Which ciphers have been defined that use the Keccak sponge?

asked Jan 26 at 16:59

1 vote

1 answer

120 views

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

asked Jan 9 at 15:39

11 votes

2 answers

3k views

Validating an RSA public key

asked Sep 21, 2022 at 13:16

8 votes

1 answer

638 views

Is constant-time compare really required for AEAD ciphers?

asked Aug 26, 2022 at 10:29

0 votes

1 answer

84 views

Meaning of the term "irreversible" for hashing

asked May 27, 2022 at 13:02

3 votes

1 answer

257 views

What's the use of storing R^2 with a public key?

asked Aug 2, 2021 at 16:08

2 votes

0 answers

65 views

What are the differences between the various Authenticated Encryption schemes using Keccak?

asked Jul 13, 2021 at 10:02

4 votes

0 answers

310 views

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

asked May 26, 2021 at 14:19

2 votes

2 answers

398 views

How does TLS with PQC use key encapsulation?

asked Mar 1, 2021 at 9:06

10 votes

0 answers

194 views

Do CCM and EAX provide key commitment?

asked Jan 25, 2021 at 15:57

2 votes

1 answer

73 views

Can you use a dynamic key and data size for KMAC?

asked Jan 13, 2021 at 12:16

5 votes

0 answers

141 views

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

asked Jan 6, 2021 at 14:08

5 votes

1 answer

441 views

What are the public key and output sizes for the four remaining PQC KEM candidates?

asked Dec 22, 2020 at 10:09

3 votes

2 answers

652 views

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

asked Sep 16, 2020 at 15:57

0 votes

0 answers

161 views

Security of CCM using 8 byte MAC within TLS

asked Aug 13, 2020 at 13:42

6 votes

2 answers

473 views

Using XOR to derive a data key for ECIES

asked Jul 24, 2020 at 9:58

5 votes

2 answers

2k views

What is the difference between data compression and compression in cryptographic algorithms?

asked May 17, 2020 at 20:38

2 votes

1 answer

348 views

Verify ECDSA signature without data

asked Mar 31, 2020 at 16:01

5 votes

1 answer

224 views

Use large key size for RC4 to avoid RC4 bias

asked Feb 25, 2020 at 11:42

2 votes

1 answer

47 views

Longer IV generation from a single block IV for ICBC

asked Feb 12, 2020 at 14:39

7 votes

2 answers

3k views

How to create an EC point from a plaintext message for encryption

asked Dec 10, 2019 at 23:07

2 votes

1 answer

57 views

Signature over MAC value for a random key

asked Dec 3, 2019 at 22:01

3 votes

0 answers

94 views

Using (EC)DH to generate a signature

asked Oct 17, 2019 at 21:07

7 votes

2 answers

1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

asked Jun 27, 2019 at 12:25

2 votes

2 answers

2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

asked May 21, 2019 at 16:09

6 votes

1 answer

469 views

Using a non-secure random generator for IV or salt generation

asked May 8, 2019 at 16:07

5 votes

2 answers

990 views

What's the reason for Monte Carlo tests for block ciphers?

asked Apr 10, 2019 at 15:30

Stack Exchange Network

104 Questions

Two-party randomness for KEM

Why does ECIES use "Key Encapsulation"? Does it?

Iteration count for (enhanced) Miller-Rabin

Which ciphers have been defined that use the Keccak sponge?

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

Validating an RSA public key

Is constant-time compare really required for AEAD ciphers?

Meaning of the term "irreversible" for hashing

What's the use of storing R^2 with a public key?

What are the differences between the various Authenticated Encryption schemes using Keccak?

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

How does TLS with PQC use key encapsulation?

Do CCM and EAX provide key commitment?

Can you use a dynamic key and data size for KMAC?

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

What are the public key and output sizes for the four remaining PQC KEM candidates?

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

Security of CCM using 8 byte MAC within TLS

Using XOR to derive a data key for ECIES

What is the difference between data compression and compression in cryptographic algorithms?

Verify ECDSA signature without data

Use large key size for RC4 to avoid RC4 bias

Longer IV generation from a single block IV for ICBC

How to create an EC point from a plaintext message for encryption

Signature over MAC value for a random key

Using (EC)DH to generate a signature

Is it possible to perform a meet-in-the-middle within a block cipher?

Preferred SHA-2 hash algorithm for MGF1 in RSA

Using a non-secure random generator for IV or salt generation

What's the reason for Monte Carlo tests for block ciphers?