Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes's user avatar
Maarten Bodewes
Moderator
  • Member for 11 years, 10 months
  • Last seen this week
  • Doggerland II
98 votes
1 answer
162k views

What is the difference between PKCS#5 padding and PKCS#7 padding

36 votes
2 answers
27k views

Practical disadvantages of GCM mode encryption

28 votes
2 answers
21k views

Which attacks are possible against raw/textbook RSA?

27 votes
1 answer
3k views

What is hardened SHA-1, how does it work and how much protection does it offer?

25 votes
2 answers
14k views

Is RSA encryption with a private key the same as signature generation?

21 votes
1 answer
8k views

Reasons for Chinese SM2 Digital Signature Algorithm

18 votes
3 answers
10k views

Modes of operation that allow padding oracle attacks

16 votes
1 answer
5k views

Security of KDF1 and KDF2 (hash based KDF's)

15 votes
2 answers
3k views

Given enough RSA signature values, is it possible to determine the public key value?

13 votes
3 answers
1k views

Counter mode secure hash algorithm

12 votes
1 answer
5k views

Sending KCV (key check value) with cipher text

12 votes
1 answer
6k views

Cryptographic security of PHP mt_rand() function using Mersenne Twister algo

11 votes
1 answer
2k views

How random is the shared secret in the Diffie Hellman key agreement

11 votes
2 answers
3k views

Should HMAC-SHA3 be preferred over H(C(k,M))?

11 votes
2 answers
3k views

Validating an RSA public key

10 votes
0 answers
194 views

Do CCM and EAX provide key commitment?

10 votes
1 answer
5k views

What is the algorithm behind PasswordDeriveBytes?

10 votes
2 answers
809 views

Which attacks are prevented by the different initial hash values for SHA-2 with truncated output?

9 votes
1 answer
796 views

Can Whirlpool take advantage of AES-NI?

9 votes
1 answer
2k views

What are the constraints on using GCM with a tag size of 96 and 128 bits?

9 votes
1 answer
898 views

Side channel security of HMAC in software

9 votes
1 answer
2k views

Practical uses of Manipulation Detection Code (MDC) and IGE

8 votes
2 answers
1k views

Given enough RSA ciphertext, is it possible to determine which key was used?

8 votes
2 answers
3k views

BER or DER X9.62 for ECDSA signature

8 votes
1 answer
3k views

Does perfect forward secrecy (using DH or ECDH) imply quantum resistance?

8 votes
1 answer
734 views

Point-at-infinity and error handling

8 votes
1 answer
638 views

Is constant-time compare really required for AEAD ciphers?

7 votes
3 answers
3k views

Formal description of KDF1 and KDF2

7 votes
2 answers
1k views

Is it possible to perform a meet-in-the-middle within a block cipher?

7 votes
2 answers
3k views

How to create an EC point from a plaintext message for encryption