User e-sushi

59 votes

2 answers

12k views

Is the software that uses PGP broken, or is it PGP itself?

asked May 14, 2018 at 17:39

33 votes

1 answer

5k views

Proof for the SHA3 claim that 256 bit security is "post-quantum sufficient"?

asked Aug 1, 2013 at 13:04

30 votes

1 answer

2k views

Is it possible to actually verify a “sponge function” security claim?

asked Jul 6, 2013 at 19:44

21 votes

5 answers

3k views

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

asked Dec 27, 2017 at 17:00

20 votes

2 answers

6k views

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

asked Sep 15, 2013 at 0:33

18 votes

1 answer

2k views

What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?

asked Oct 22, 2016 at 19:26

17 votes

1 answer

2k views

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

asked Dec 1, 2013 at 23:24

16 votes

6 answers

3k views

How exactly is "true randomness" defined in the realms of cryptography?

asked Oct 5, 2013 at 15:57

15 votes

3 answers

1k views

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

asked Dec 21, 2013 at 7:28

14 votes

1 answer

2k views

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

asked Mar 14, 2018 at 17:21

12 votes

1 answer

3k views

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

asked Aug 31, 2013 at 6:43

11 votes

1 answer

358 views

Homogenous vs heterogeneous unbalanced Feistel networks?

asked Aug 5, 2014 at 14:53

11 votes

0 answers

289 views

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

asked Nov 18, 2017 at 4:43

10 votes

1 answer

362 views

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

asked Nov 1, 2013 at 4:05

9 votes

3 answers

1k views

What criteria make the theta step of Keccak's round function reversible?

asked Aug 14, 2013 at 16:18

9 votes

1 answer

655 views

Are there any security issues when replacing the SHA-256 initialisation values?

asked Mar 11, 2017 at 14:01

9 votes

2 answers

526 views

What is the official, generally accepted definition of "lightweight crypto"?

asked Mar 29, 2017 at 12:53

8 votes

1 answer

607 views

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

asked Oct 18, 2017 at 12:20

8 votes

2 answers

2k views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

asked Dec 7, 2017 at 6:28

7 votes

1 answer

456 views

Does a conditional statement depending on a round number introduce timing attack problems?

asked Dec 16, 2017 at 18:00

7 votes

2 answers

792 views

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

asked Aug 14, 2017 at 14:15

7 votes

1 answer

733 views

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

asked Nov 13, 2017 at 17:59

7 votes

4 answers

3k views

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

asked Jun 30, 2017 at 1:25

7 votes

2 answers

416 views

Advantages of making streamcipher stream depend on plaintext?

asked Jul 18, 2014 at 17:43

7 votes

1 answer

627 views

Does any public key crypto support and/or allow a 3rd party "control-key"?

asked Jul 23, 2013 at 5:39

6 votes

2 answers

886 views

Can we exchange the permutation of a sponge construction?

asked Jul 29, 2016 at 18:49

6 votes

1 answer

743 views

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

asked Aug 9, 2014 at 12:21

5 votes

1 answer

300 views

Skein state size advantages

asked May 6, 2014 at 0:37

5 votes

5 answers

2k views

Effective security of block cipher – equal the key size, or half the key size?

asked Jul 12, 2014 at 16:39

5 votes

1 answer

1k views

Security difference(s) between Shamir's Secret Sharing Scheme and Blakley's Secret Sharing Scheme?

asked Jan 28, 2017 at 12:10

Stack Exchange Network

43 Questions

Is the software that uses PGP broken, or is it PGP itself?

Proof for the SHA3 claim that 256 bit security is "post-quantum sufficient"?

Is it possible to actually verify a “sponge function” security claim?

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

How exactly is "true randomness" defined in the realms of cryptography?

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

Homogenous vs heterogeneous unbalanced Feistel networks?

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

What criteria make the theta step of Keccak's round function reversible?

Are there any security issues when replacing the SHA-256 initialisation values?

What is the official, generally accepted definition of "lightweight crypto"?

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

Should the identity of a sender be verified using additional means, or does a MAC suffice?

Does a conditional statement depending on a round number introduce timing attack problems?

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

Advantages of making streamcipher stream depend on plaintext?

Does any public key crypto support and/or allow a 3rd party "control-key"?

Can we exchange the permutation of a sponge construction?

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

Skein state size advantages

Effective security of block cipher – equal the key size, or half the key size?

Security difference(s) between Shamir's Secret Sharing Scheme and Blakley's Secret Sharing Scheme?