User Maarten Bodewes

2 votes

1 answer

457 views

Bit padding instead of PKCS#5 padding

asked Sep 6, 2014 at 13:36

4 votes

1 answer

447 views

Performing HMAC with random key before MAC comparison

asked Jan 17, 2015 at 15:27

5 votes

1 answer

439 views

What are the public key and output sizes for the four remaining PQC KEM candidates?

asked Dec 22, 2020 at 10:09

6 votes

2 answers

426 views

Fast post-processing for broken RDRAND

asked Sep 17, 2013 at 10:48

2 votes

2 answers

398 views

How does TLS with PQC use key encapsulation?

asked Mar 1, 2021 at 9:06

1 vote

0 answers

387 views

CAST-256 (CAST6) versions or S-Boxes

asked Dec 9, 2014 at 12:53

3 votes

1 answer

366 views

Partial hash code protocol for security tokens providing signatures

asked Aug 26, 2014 at 11:51

5 votes

2 answers

365 views

CSPRNG that cannot be used as random extractor

asked Jul 27, 2014 at 13:32

2 votes

1 answer

348 views

Verify ECDSA signature without data

asked Mar 31, 2020 at 16:01

1 vote

0 answers

323 views

Are partial hashes used in cryptographic protocols?

asked Aug 31, 2014 at 18:53

4 votes

0 answers

310 views

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

asked May 26, 2021 at 14:19

2 votes

2 answers

284 views

What does OIW stand for

asked Oct 3, 2014 at 16:03

7 votes

0 answers

266 views

How many qubits are required to break classical Diffie-Hellman?

asked Aug 15, 2018 at 13:29

3 votes

1 answer

253 views

What's the use of storing R^2 with a public key?

asked Aug 2, 2021 at 16:08

3 votes

1 answer

241 views

Twisted curves in protocol

asked Jun 3, 2014 at 12:52

4 votes

1 answer

230 views

Generating unsigned, bounded random value using signed bounded random values

asked May 12, 2014 at 15:39

5 votes

1 answer

230 views

Combining classical attacks and quantum cryptanalysis

asked Oct 24, 2018 at 19:33

5 votes

1 answer

224 views

Use large key size for RC4 to avoid RC4 bias

asked Feb 25, 2020 at 11:42

6 votes

1 answer

216 views

Streaming mode of operation that is more resistant against nonce reuse

asked Aug 10, 2014 at 17:57

0 votes

0 answers

214 views

NRPAD and FPAD padding schemes (Korean Seed?)

asked Nov 3, 2014 at 9:27

0 votes

1 answer

213 views

RSA-KEM: minimal number of random bits

asked Nov 17, 2017 at 16:08

10 votes

0 answers

194 views

Do CCM and EAX provide key commitment?

asked Jan 25, 2021 at 15:57

3 votes

1 answer

194 views

Authenticate encrypted seed for KEM + AEAD hybrid cryptosystem

asked Sep 8, 2015 at 21:10

3 votes

1 answer

173 views

Can length extension attacks be avoided by a single bit flip?

asked Sep 26, 2018 at 10:36

0 votes

1 answer

167 views

How to compute $a$ in the complex discard method of NIST SP 800-90

asked Aug 1, 2017 at 15:49

0 votes

0 answers

160 views

Security of CCM using 8 byte MAC within TLS

asked Aug 13, 2020 at 13:42

5 votes

0 answers

141 views

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

asked Jan 6, 2021 at 14:08

5 votes

0 answers

138 views

Upgrading key derivation by adding an XOR with a known value

asked Nov 23, 2018 at 11:37

1 vote

0 answers

128 views

Reason for including the public key of the key agreement in the KDF

asked Feb 14, 2019 at 2:16

1 vote

2 answers

126 views

Why does ECIES use "Key Encapsulation"? Does it?

asked Sep 1 at 11:24

Stack Exchange Network

104 Questions

Bit padding instead of PKCS#5 padding

Performing HMAC with random key before MAC comparison

What are the public key and output sizes for the four remaining PQC KEM candidates?

Fast post-processing for broken RDRAND

How does TLS with PQC use key encapsulation?

CAST-256 (CAST6) versions or S-Boxes

Partial hash code protocol for security tokens providing signatures

CSPRNG that cannot be used as random extractor

Verify ECDSA signature without data

Are partial hashes used in cryptographic protocols?

Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?

What does OIW stand for

How many qubits are required to break classical Diffie-Hellman?

What's the use of storing R^2 with a public key?

Twisted curves in protocol

Generating unsigned, bounded random value using signed bounded random values

Combining classical attacks and quantum cryptanalysis

Use large key size for RC4 to avoid RC4 bias

Streaming mode of operation that is more resistant against nonce reuse

NRPAD and FPAD padding schemes (Korean Seed?)

RSA-KEM: minimal number of random bits

Do CCM and EAX provide key commitment?

Authenticate encrypted seed for KEM + AEAD hybrid cryptosystem

Can length extension attacks be avoided by a single bit flip?

How to compute $a$ in the complex discard method of NIST SP 800-90

Security of CCM using 8 byte MAC within TLS

Challenging $O(2^{n/2})$ for hash collisions using quantum computers

Upgrading key derivation by adding an XOR with a known value

Reason for including the public key of the key agreement in the KDF

Why does ECIES use "Key Encapsulation"? Does it?