Skip to main content
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes
Moderator
  • Member for 12 years, 8 months
  • Last seen this week
  • Doggerland II
99 votes
1 answer
171k views

What is the difference between PKCS#5 padding and PKCS#7 padding

36 votes
2 answers
27k views

Practical disadvantages of GCM mode encryption

30 votes
2 answers
23k views

Which attacks are possible against raw/textbook RSA?

28 votes
1 answer
3k views

What is hardened SHA-1, how does it work and how much protection does it offer?

25 votes
2 answers
15k views

Is RSA encryption with a private key the same as signature generation?

21 votes
1 answer
9k views

Reasons for Chinese SM2 Digital Signature Algorithm

19 votes
3 answers
11k views

Modes of operation that allow padding oracle attacks

16 votes
1 answer
5k views

Security of KDF1 and KDF2 (hash based KDF's)

15 votes
2 answers
3k views

Given enough RSA signature values, is it possible to determine the public key value?

14 votes
3 answers
1k views

Counter mode secure hash algorithm

13 votes
2 answers
4k views

Validating an RSA public key

12 votes
1 answer
5k views

Sending KCV (key check value) with cipher text

12 votes
1 answer
6k views

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

11 votes
1 answer
2k views

How random is the shared secret in the Diffie Hellman key agreement

11 votes
2 answers
4k views

Should HMAC-SHA3 be preferred over H(C(k,M))?

10 votes
1 answer
5k views

What is the algorithm behind PasswordDeriveBytes?

10 votes
2 answers
862 views

Which attacks are prevented by the different initial hash values for SHA-2 with truncated output?

10 votes
0 answers
217 views

Do CCM and EAX provide key commitment?

9 votes
1 answer
3k views

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

9 votes
1 answer
829 views

Can Whirlpool take advantage of AES-NI?

9 votes
1 answer
2k views

What are the constraints on using GCM with a tag size of 96 and 128 bits?

9 votes
1 answer
986 views

Side channel security of HMAC in software

9 votes
1 answer
2k views

Practical uses of Manipulation Detection Code (MDC) and IGE

8 votes
2 answers
1k views

Given enough RSA ciphertext, is it possible to determine which key was used?

8 votes
2 answers
3k views

BER or DER X9.62 for ECDSA signature

8 votes
1 answer
765 views

Point-at-infinity and error handling

8 votes
1 answer
717 views

Is constant-time compare really required for AEAD ciphers?

8 votes
2 answers
1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

7 votes
3 answers
3k views

Formal description of KDF1 and KDF2

7 votes
2 answers
4k views

How to create an EC point from a plaintext message for encryption