Skip to main content
The 2024 Developer Survey results are live! See the results
e-sushi's user avatar
e-sushi's user avatar
e-sushi's user avatar
e-sushi
  • Member for 11 years, 2 months
  • Last seen more than a week ago
59 votes
2 answers
12k views

Is the software that uses PGP broken, or is it PGP itself?

34 votes
1 answer
6k views

Proof for the SHA3 claim that 256 bit security is "post-quantum sufficient"?

31 votes
1 answer
2k views

Is it possible to actually verify a “sponge function” security claim?

21 votes
5 answers
3k views

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

20 votes
2 answers
6k views

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

18 votes
1 answer
2k views

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

18 votes
1 answer
2k views

What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?

16 votes
6 answers
3k views

How exactly is "true randomness" defined in the realms of cryptography?

15 votes
3 answers
1k views

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

14 votes
1 answer
2k views

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

13 votes
1 answer
3k views

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

11 votes
1 answer
364 views

Homogenous vs heterogeneous unbalanced Feistel networks?

11 votes
0 answers
289 views

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

10 votes
3 answers
1k views

What criteria make the theta step of Keccak's round function reversible?

10 votes
1 answer
400 views

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

9 votes
1 answer
678 views

Are there any security issues when replacing the SHA-256 initialisation values?

9 votes
2 answers
537 views

What is the official, generally accepted definition of "lightweight crypto"?

8 votes
1 answer
642 views

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

8 votes
2 answers
2k views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

7 votes
1 answer
457 views

Does a conditional statement depending on a round number introduce timing attack problems?

7 votes
2 answers
829 views

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

7 votes
1 answer
746 views

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

7 votes
4 answers
4k views

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

7 votes
2 answers
420 views

Advantages of making streamcipher stream depend on plaintext?

7 votes
1 answer
650 views

Does any public key crypto support and/or allow a 3rd party "control-key"?

6 votes
2 answers
927 views

Can we exchange the permutation of a sponge construction?

6 votes
1 answer
766 views

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

5 votes
1 answer
309 views

Skein state size advantages

5 votes
5 answers
2k views

Effective security of block cipher – equal the key size, or half the key size?

5 votes
1 answer
1k views

Security difference(s) between Shamir's Secret Sharing Scheme and Blakley's Secret Sharing Scheme?