user avatar
user avatar
user avatar
e-sushi
  • Member for 9 years
  • Last seen more than a month ago
56 votes
2 answers
11k views

Is the software that uses PGP broken, or is it PGP itself?

31 votes
1 answer
4k views

Proof for the SHA3 claim that 256 bit security is "post-quantum sufficient"?

28 votes
1 answer
2k views

Is it possible to actually verify a “sponge function” security claim?

21 votes
5 answers
2k views

Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?

20 votes
2 answers
5k views

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

18 votes
1 answer
2k views

What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?

16 votes
1 answer
2k views

Did NIST verify “post-quantum” claims in the SHA3 proposal papers?

16 votes
6 answers
3k views

How exactly is "true randomness" defined in the realms of cryptography?

14 votes
3 answers
1k views

Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?

14 votes
1 answer
2k views

What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?

12 votes
1 answer
2k views

Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?

11 votes
1 answer
350 views

Homogenous vs heterogeneous unbalanced Feistel networks?

11 votes
0 answers
286 views

Is there a pen-and-paper way to securely share a secret via public key encryption? [duplicate]

10 votes
1 answer
327 views

How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?

9 votes
1 answer
581 views

Are there any security issues when replacing the SHA-256 initialisation values?

9 votes
2 answers
476 views

What is the official, generally accepted definition of "lightweight crypto"?

8 votes
1 answer
545 views

What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?

8 votes
2 answers
1k views

What criteria make the theta step of Keccak's round function reversible?

8 votes
2 answers
2k views

Should the identity of a sender be verified using additional means, or does a MAC suffice?

7 votes
1 answer
451 views

Does a conditional statement depending on a round number introduce timing attack problems?

7 votes
2 answers
702 views

Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?

7 votes
1 answer
527 views

Does any public key crypto support and/or allow a 3rd party "control-key"?

7 votes
1 answer
689 views

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

7 votes
4 answers
3k views

When is an RNG a CSPRNG, a CSRNG, or a TRNG?

7 votes
2 answers
395 views

Advantages of making streamcipher stream depend on plaintext?

6 votes
2 answers
760 views

Can we exchange the permutation of a sponge construction?

6 votes
1 answer
679 views

Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve

5 votes
1 answer
287 views

Skein state size advantages

5 votes
5 answers
2k views

Effective security of block cipher – equal the key size, or half the key size?

5 votes
2 answers
739 views

What are the standard procedures in cryptanalysis to analyze unknown ciphertext?