e-sushi
  • Member for 8 years, 8 months
  • Last seen more than a month ago
2 answers
55 votes
11k views
13 bookmarks
Is the software that uses PGP broken, or is it PGP itself?
1 answers
30 votes
4k views
6 bookmarks
Proof for the SHA3 claim that 256 bit security is "post-quantum sufficient"?
1 answers
27 votes
2k views
8 bookmarks
Is it possible to actually verify a “sponge function” security claim?
5 answers
21 votes
2k views
11 bookmarks
Are there any (asymmetric) cryptographic primitives not relying on arithmetic over prime fields and/or finite fields?
2 answers
20 votes
5k views
4 bookmarks
What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?
1 answers
18 votes
2k views
6 bookmarks
What does a "real" quantum computer need for cryptanalysis and/or cryptographic attack purposes?
6 answers
16 votes
3k views
1 bookmarks
How exactly is "true randomness" defined in the realms of cryptography?
1 answers
16 votes
2k views
7 bookmarks
Did NIST verify “post-quantum” claims in the SHA3 proposal papers?
1 answers
14 votes
2k views
4 bookmarks
What was NIST’s reason to switch naming from MD… (Message Digest) to SHA… (Secure Hashing Algorithm)?
3 answers
14 votes
1k views
6 bookmarks
Can we ensure the security of a crypto-algorithm and -implementaton against acoustic cryptanalysis?
1 answers
12 votes
2k views
3 bookmarks
Is the first version of the Message-Digest algorithm by Ronald Rivest publically available?
0 answers
11 votes
273 views
4 bookmarks
Is there a pen-and-paper way to securely share a secret via public key encryption?
1 answers
11 votes
343 views
Homogenous vs heterogeneous unbalanced Feistel networks?
1 answers
10 votes
319 views
2 bookmarks
How would you encrypt-then-MAC when using pen-and-paper and a Caesar cipher?
2 answers
9 votes
467 views
1 bookmarks
What is the official, generally accepted definition of "lightweight crypto"?
1 answers
9 votes
569 views
1 bookmarks
Are there any security issues when replacing the SHA-256 initialisation values?
2 answers
8 votes
2k views
1 bookmarks
Should the identity of a sender be verified using additional means, or does a MAC suffice?
1 answers
8 votes
538 views
1 bookmarks
What are the implications of a non “constant time” implementations on trusted systems in a non-network scenario?
2 answers
8 votes
1k views
1 bookmarks
What criteria make the theta step of Keccak's round function reversible?
4 answers
7 votes
3k views
5 bookmarks
When is an RNG a CSPRNG, a CSRNG, or a TRNG?
1 answers
7 votes
511 views
1 bookmarks
Does any public key crypto support and/or allow a 3rd party "control-key"?
1 answers
7 votes
447 views
Does a conditional statement depending on a round number introduce timing attack problems?
1 answers
7 votes
679 views
Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?
2 answers
7 votes
672 views
2 bookmarks
Does a practical collision attack on a cryptographic hash function also mean it fails “indistinguishable from random data”?
2 answers
7 votes
388 views
1 bookmarks
Advantages of making streamcipher stream depend on plaintext?
2 answers
6 votes
730 views
3 bookmarks
Can we exchange the permutation of a sponge construction?
1 answers
6 votes
656 views
1 bookmarks
Diffie-Hellman when $p$ and $g$ are pre-agreed and hidden from Eve
2 answers
5 votes
387 views
2 bookmarks
Why are theoretical hash constructions based on the hardness of the discrete logarithm problem not really used in practice?
2 answers
5 votes
733 views
1 bookmarks
What are the standard procedures in cryptanalysis to analyze unknown ciphertext?
5 answers
5 votes
2k views
2 bookmarks
Effective security of block cipher – equal the key size, or half the key size?