Skip to main content
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes
Moderator
  • Member for 12 years, 7 months
  • Last seen this week
  • Doggerland II
1 vote
0 answers
87 views

Two-party randomness for KEM

1 vote
2 answers
420 views

Why does ECIES use "Key Encapsulation"? Does it?

2 votes
1 answer
176 views

Iteration count for (enhanced) Miller-Rabin

4 votes
1 answer
114 views

Which ciphers have been defined that use the Keccak sponge?

1 vote
1 answer
148 views

What exactly is a "pass" when talking about hashing, ciphers and MAC algorithms?

13 votes
2 answers
3k views

Validating an RSA public key

8 votes
1 answer
712 views

Is constant-time compare really required for AEAD ciphers?

0 votes
1 answer
134 views

Meaning of the term "irreversible" for hashing

3 votes
1 answer
416 views

What's the use of storing R^2 with a public key?

2 votes
0 answers
85 views

What are the differences between the various Authenticated Encryption schemes using Keccak?

4 votes
0 answers
379 views

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

3 votes
2 answers
568 views

How does TLS with PQC use key encapsulation?

10 votes
0 answers
213 views

Do CCM and EAX provide key commitment?

2 votes
1 answer
88 views

Can you use a dynamic key and data size for KMAC?

5 votes
0 answers
154 views

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

5 votes
1 answer
580 views

What are the public key and output sizes for the four remaining PQC KEM candidates?

3 votes
2 answers
799 views

Is it possible to create a ciphersuite for TLS 1.3 using only the Keccak-sponge/duplex?

0 votes
0 answers
191 views

Security of CCM using 8 byte MAC within TLS

6 votes
2 answers
516 views

Using XOR to derive a data key for ECIES

5 votes
2 answers
2k views

What is the difference between data compression and compression in cryptographic algorithms?

2 votes
1 answer
386 views

Verify ECDSA signature without data

5 votes
1 answer
266 views

Use large key size for RC4 to avoid RC4 bias

2 votes
1 answer
49 views

Longer IV generation from a single block IV for ICBC

7 votes
2 answers
4k views

How to create an EC point from a plaintext message for encryption

2 votes
1 answer
64 views

Signature over MAC value for a random key

3 votes
0 answers
97 views

Using (EC)DH to generate a signature

8 votes
2 answers
1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

2 votes
2 answers
2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

6 votes
1 answer
548 views

Using a non-secure random generator for IV or salt generation

5 votes
2 answers
1k views

What's the reason for Monte Carlo tests for block ciphers?