User e-sushi

13

55

votes

2

answers

11k

views

Is the software that uses PGP broken, or is it PGP itself?

Oct 14 '19 at 1:00 Squeamish Ossifrage 43.3k

6

31

votes

1

answer

4k

views

Proof for the SHA3 claim that 256 bit security is “post-quantum sufficient”?

hash cryptanalysis algorithm-design post-quantum-cryptography sha-3

Mar 1 '19 at 11:52 user66291 1

8

27

votes

1

answer

2k

views

Is it possible to actually verify a “sponge function” security claim?

hash cryptanalysis collision-resistance sha-3 sponge

Dec 13 '17 at 10:57 e-sushi 16.9k

11

20

votes

5

answers

2k

views

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

algorithm-design finite-field prime-field

Jan 18 '18 at 23:42 David Cary 4,968

4

19

votes

2

answers

5k

views

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

security-definition random-number-generator

Feb 19 '20 at 8:03 alienflow 111

6

18

votes

1

answer

2k

views

What does a “real” quantum computer need for cryptanalysis and/or cryptographic attack purposes?

cryptanalysis attack quantum-cryptography

Mar 7 '17 at 19:08 JohnEye 103

1

16

votes

6

answers

3k

views

How exactly is “true randomness” defined in the realms of cryptography?

randomness reference-request terminology security-definition

May 18 '18 at 13:52 Patriot 2,346

7

15

votes

1

answer

2k

views

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

hash post-quantum-cryptography preimage-resistance sha-3 nist

Apr 19 '17 at 22:09 e-sushi 16.9k

4

14

votes

1

answer

2k

views

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

hash reference-request terminology nist standards

Mar 14 '18 at 17:43 poncho 118k

6

14

votes

3

answers

1k

views

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

rsa cryptanalysis keys key-recovery acoustic-cryptanalysis

Aug 7 '14 at 14:09 Community♦ 1

4

11

votes

0

answers

258

views

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

public-key key-exchange pen-and-paper

Nov 22 '17 at 10:08 e-sushi 16.9k

11

votes

1

answer

329

views

Homogenous vs heterogeneous unbalanced Feistel networks?

encryption cryptanalysis algorithm-design symmetric feistel-network

Nov 5 '17 at 22:08 Community♦ 1

2

10

votes

1

answer

311

views

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

mac classical-cipher pen-and-paper education

Aug 28 '14 at 20:13 Ilmari Karonen 42.2k

3

10

votes

1

answer

2k

views

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

hash algorithm-design

Jun 2 '14 at 8:01 CodesInChaos 23.5k

1

9

votes

2

answers

450

views

What is the official, generally accepted definition of “lightweight crypto”?

reference-request terminology lightweight

May 22 '17 at 17:25 Community♦ 1

1

9

votes

1

answer

510

views

Are there any security issues when replacing the SHA-256 initialisation values?

cryptanalysis algorithm-design reference-request implementation sha-256

Mar 12 '17 at 12:27 Community♦ 1

1

8

votes

2

answers

2k

views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

encryption cryptanalysis authentication mac integrity

Feb 28 '18 at 8:38 Yanira Rodriguez 1

1

8

votes

1

answer

521

views

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

aes cryptanalysis attack timing-attack

Oct 19 '17 at 9:45 e-sushi 16.9k

1

8

votes

2

answers

993

views

What criteria make the theta step of Keccak's round function reversible?

sha-3 keccak function-evaluation

Jun 6 '17 at 6:20 Q-Club 1

4

7

votes

4

answers

2k

views

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

random-number-generator reference-request randomness terminology trng

Nov 2 '18 at 1:27 Community♦ 1

7

votes

1

answer

441

views

Does a conditional statement depending on a round number introduce timing attack problems?

algorithm-design implementation timing-attack

Dec 17 '17 at 12:33 e-sushi 16.9k

7

votes

1

answer

598

views

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

aes passwords implementation pbkdf-2 secure-storage

Nov 20 '17 at 12:36 e-sushi 16.9k

2

7

votes

2

answers

583

views

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

hash cryptanalysis collision-resistance randomness sha-1

Aug 24 '17 at 22:12 Luis Casillas 13.5k

1

7

votes

2

answers

378

views

Advantages of making streamcipher stream depend on plaintext?

cryptanalysis algorithm-design stream-cipher

Feb 4 '16 at 7:55 Community♦ 1

3

6

votes

2

answers

687

views

Can we exchange the permutation of a sponge construction?

algorithm-design randomness permutation sponge

Jul 31 '16 at 10:21 e-sushi 16.9k

1

6

votes

1

answer

578

views

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

protocol-design protocol-analysis

Feb 19 '16 at 4:42 rusyasoft 1

5

votes

1

answer

452

views

Does any public key crypto support and/or allow a 3rd party “control-key”?

public-key

Apr 8 '18 at 14:52 e-sushi 16.9k

2

5

votes

2

answers

328

views

Why are theoretical hash constructions based on the hardness of the discrete logarithm problem not really used in practice?

hash algorithm-design discrete-logarithm merkle-damgaard

Jan 13 '18 at 17:59 Yehuda Lindell 25.2k

1

5

votes

2

answers

720

views

What are the standard procedures in cryptanalysis to analyze unknown ciphertext?

cryptanalysis protocol-design reference-request

Jun 30 '17 at 18:19 e-sushi 16.9k

2

5

votes

5

answers

1k

views

Effective security of block cipher – equal the key size, or half the key size?

block-cipher algorithm-design symmetric key-size security-definition

Jun 30 '17 at 18:18 e-sushi 16.9k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

43 Questions

Is the software that uses PGP broken, or is it PGP itself?

Proof for the SHA3 claim that 256 bit security is “post-quantum sufficient”?

Is it possible to actually verify a “sponge function” security claim?

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

What does a “real” quantum computer need for cryptanalysis and/or cryptographic attack purposes?

How exactly is “true randomness” defined in the realms of cryptography?

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

Homogenous vs heterogeneous unbalanced Feistel networks?

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

What is the official, generally accepted definition of “lightweight crypto”?

Are there any security issues when replacing the SHA-256 initialisation values?

Should the identity of a sender be verified using additional means, or does a MAC suffice?

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

What criteria make the theta step of Keccak's round function reversible?

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

Does a conditional statement depending on a round number introduce timing attack problems?

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

Advantages of making streamcipher stream depend on plaintext?

Can we exchange the permutation of a sponge construction?

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

Does any public key crypto support and/or allow a 3rd party “control-key”?

Why are theoretical hash constructions based on the hardness of the discrete logarithm problem not really used in practice?

What are the standard procedures in cryptanalysis to analyze unknown ciphertext?

Effective security of block cipher – equal the key size, or half the key size?