User e-sushi

56 votes

2 answers

11k views

Is the software that uses PGP broken, or is it PGP itself?

asked May 14, 2018 at 17:39

31 votes

1 answer

4k views

Proof for the SHA3 claim that 256 bit security is "post-quantum sufficient"?

hash cryptanalysis algorithm-design post-quantum-cryptography sha-3

asked Aug 1, 2013 at 13:04

28 votes

1 answer

2k views

Is it possible to actually verify a “sponge function” security claim?

hash cryptanalysis collision-resistance sha-3 sponge

asked Jul 6, 2013 at 19:44

21 votes

5 answers

2k views

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

algorithm-design finite-field prime-field

asked Dec 27, 2017 at 17:00

20 votes

2 answers

5k views

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

security-definition random-number-generator

asked Sep 15, 2013 at 0:33

18 votes

1 answer

2k views

What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?

cryptanalysis attack quantum-cryptography

asked Oct 22, 2016 at 19:26

16 votes

1 answer

2k views

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

hash post-quantum-cryptography preimage-resistance sha-3 nist

asked Dec 1, 2013 at 23:24

16 votes

6 answers

3k views

How exactly is "true randomness" defined in the realms of cryptography?

randomness reference-request terminology security-definition

asked Oct 5, 2013 at 15:57

14 votes

3 answers

1k views

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

rsa cryptanalysis keys key-recovery acoustic-cryptanalysis

asked Dec 21, 2013 at 7:28

14 votes

1 answer

2k views

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

hash reference-request terminology nist standards

asked Mar 14, 2018 at 17:21

12 votes

1 answer

2k views

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

hash algorithm-design

asked Aug 31, 2013 at 6:43

11 votes

1 answer

350 views

Homogenous vs heterogeneous unbalanced Feistel networks?

encryption cryptanalysis algorithm-design symmetric feistel-network

asked Aug 5, 2014 at 14:53

11 votes

0 answers

286 views

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

public-key key-exchange pen-and-paper

asked Nov 18, 2017 at 4:43

10 votes

1 answer

327 views

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

mac classical-cipher pen-and-paper education

asked Nov 1, 2013 at 4:05

9 votes

1 answer

581 views

Are there any security issues when replacing the SHA-256 initialisation values?

cryptanalysis algorithm-design reference-request implementation sha-256

asked Mar 11, 2017 at 14:01

9 votes

2 answers

476 views

What is the official, generally accepted definition of "lightweight crypto"?

reference-request terminology lightweight

asked Mar 29, 2017 at 12:53

8 votes

1 answer

545 views

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

aes cryptanalysis attack timing-attack

asked Oct 18, 2017 at 12:20

8 votes

2 answers

1k views

What criteria make the theta step of Keccak's round function reversible?

sha-3 keccak function-evaluation

asked Aug 14, 2013 at 16:18

8 votes

2 answers

2k views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

encryption cryptanalysis authentication mac integrity

asked Dec 7, 2017 at 6:28

7 votes

1 answer

451 views

Does a conditional statement depending on a round number introduce timing attack problems?

algorithm-design implementation timing-attack

asked Dec 16, 2017 at 18:00

7 votes

2 answers

702 views

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

hash cryptanalysis collision-resistance randomness sha-1

asked Aug 14, 2017 at 14:15

7 votes

1 answer

527 views

Does any public key crypto support and/or allow a 3rd party "control-key"?

public-key

asked Jul 23, 2013 at 5:39

7 votes

1 answer

689 views

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

aes passwords implementation pbkdf-2 secure-storage

asked Nov 13, 2017 at 17:59

7 votes

4 answers

3k views

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

random-number-generator reference-request randomness terminology trng

asked Jun 30, 2017 at 1:25

7 votes

2 answers

395 views

Advantages of making streamcipher stream depend on plaintext?

cryptanalysis algorithm-design stream-cipher

asked Jul 18, 2014 at 17:43

6 votes

2 answers

760 views

Can we exchange the permutation of a sponge construction?

algorithm-design randomness permutation sponge

asked Jul 29, 2016 at 18:49

6 votes

1 answer

679 views

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

protocol-design protocol-analysis

asked Aug 9, 2014 at 12:21

5 votes

1 answer

287 views

Skein state size advantages

hash algorithm-design skein

asked May 6, 2014 at 0:37

5 votes

5 answers

2k views

Effective security of block cipher – equal the key size, or half the key size?

block-cipher algorithm-design symmetric key-size security-definition

asked Jul 12, 2014 at 16:39

5 votes

2 answers

739 views

What are the standard procedures in cryptanalysis to analyze unknown ciphertext?

cryptanalysis protocol-design reference-request

asked Jun 27, 2013 at 15:13

Stack Exchange Network

current community

your communities

more stack exchange communities

43 Questions

Is the software that uses PGP broken, or is it PGP itself?

Proof for the SHA3 claim that 256 bit security is "post-quantum sufficient"?

Is it possible to actually verify a “sponge function” security claim?

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

How exactly is "true randomness" defined in the realms of cryptography?

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

Homogenous vs heterogeneous unbalanced Feistel networks?

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

Are there any security issues when replacing the SHA-256 initialisation values?

What is the official, generally accepted definition of "lightweight crypto"?

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

What criteria make the theta step of Keccak's round function reversible?

Should the identity of a sender be verified using additional means, or does a MAC suffice?

Does a conditional statement depending on a round number introduce timing attack problems?

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

Does any public key crypto support and/or allow a 3rd party "control-key"?

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

Advantages of making streamcipher stream depend on plaintext?

Can we exchange the permutation of a sponge construction?

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

Skein state size advantages

Effective security of block cipher – equal the key size, or half the key size?

What are the standard procedures in cryptanalysis to analyze unknown ciphertext?