User otus

58 votes

Is secp256r1 more secure than secp256k1?

answered Sep 4, 2014 at 18:49

42 votes

Accepted

Are checksums essentially non-secure versions of cryptographic hashes?

answered Feb 21, 2016 at 15:38

34 votes

Accepted

Can Shannon's entropy be used to determine if a file is encrypted?

answered Jun 29, 2016 at 7:05

31 votes

Accepted

Can I remove newlines in a public key?

answered Sep 10, 2014 at 6:03

28 votes

Accepted

Is HMAC needed for a SHA-3 based MAC?

answered Jun 29, 2014 at 8:00

28 votes

Accepted

How to find modulus from a RSA public key?

answered Jul 7, 2014 at 11:06

25 votes

Accepted

What is the recommended number of iterations for Argon2?

answered Jun 18, 2016 at 9:07

24 votes

HMAC-SHA1 vs HMAC-SHA256

answered Aug 17, 2015 at 13:00

24 votes

What is the new attack on SHA-1 "SHAttered" and how does it work?

answered Feb 23, 2017 at 15:25

23 votes

Accepted

Does SHA-1024 hash exist?

answered Aug 18, 2014 at 13:32

23 votes

Is it better to encrypt before compression or vice versa?

answered Mar 16, 2016 at 10:19

22 votes

Accepted

How many qubits are required to break RSA 2048 or 4096 with a universal quantum computer?

answered May 8, 2016 at 6:37

21 votes

Accepted

Is it possible to recover the seed used by Python's pseudo-random number generator?

answered Dec 9, 2017 at 11:52

20 votes

Accepted

Perfect Forward Secrecy with NaCl

answered May 20, 2014 at 12:02

19 votes

Accepted

Where do Windows applications get entropy from?

answered Aug 24, 2016 at 18:05

18 votes

Did a certain cryptography method get abandoned due to security flaws in the past?

answered Jun 5, 2016 at 8:06

17 votes

Are there any practical ways to transfer random data securely?

answered Jan 30, 2016 at 8:40

16 votes

Accepted

What curve and key length to use in ECDSA?

answered Jul 7, 2014 at 9:20

15 votes

Accepted

Why should one prefer Salsa20 over ChaCha?

answered Jul 27, 2015 at 8:19

14 votes

Accepted

Is SipHash cryptographically secure?

answered Jul 4, 2014 at 6:09

14 votes

Accepted

Password entropy much lower than entropy of encryption keys. Why is this acceptable?

answered Jun 5, 2016 at 5:39

14 votes

Accepted

Is there an encryption format that preserves length and only outputs alphanumerics?

answered Sep 10, 2015 at 6:20

13 votes

Accepted

Why is it OK for secretbox to leak the message length?

answered Oct 19, 2015 at 16:11

13 votes

Accepted

Can double-encrypting be easier to break then either algorithm on its own?

answered Mar 19, 2016 at 8:20

13 votes

Accepted

Error propagation in CBC mode

answered May 26, 2014 at 19:18

12 votes

Accepted

A patched SHA1 attempt for password verification

answered Aug 20, 2014 at 7:41

12 votes

Found a way to crack AES-128, what now?

answered Aug 25, 2014 at 19:33

12 votes

Accepted

What was the NSA's reasoning for making their bitwise combination functions in SHA-1 the way they did?

answered Aug 27, 2015 at 12:41

12 votes

Why do Feistel ciphers need round keys?

answered Jun 20, 2017 at 8:15

11 votes

Accepted

What happens if a nonce is reused in ChaCha20-Poly1305?

answered Jan 23, 2016 at 12:35

Stack Exchange Network

630 Answers

Is secp256r1 more secure than secp256k1?

Are checksums essentially non-secure versions of cryptographic hashes?

Can Shannon's entropy be used to determine if a file is encrypted?

Can I remove newlines in a public key?

Is HMAC needed for a SHA-3 based MAC?

How to find modulus from a RSA public key?

What is the recommended number of iterations for Argon2?

HMAC-SHA1 vs HMAC-SHA256

What is the new attack on SHA-1 "SHAttered" and how does it work?

Does SHA-1024 hash exist?

Is it better to encrypt before compression or vice versa?

How many qubits are required to break RSA 2048 or 4096 with a universal quantum computer?

Is it possible to recover the seed used by Python's pseudo-random number generator?

Perfect Forward Secrecy with NaCl

Where do Windows applications get entropy from?

Did a certain cryptography method get abandoned due to security flaws in the past?

Are there any practical ways to transfer random data securely?

What curve and key length to use in ECDSA?

Why should one prefer Salsa20 over ChaCha?

Is SipHash cryptographically secure?

Password entropy much lower than entropy of encryption keys. Why is this acceptable?

Is there an encryption format that preserves length and only outputs alphanumerics?

Why is it OK for secretbox to leak the message length?

Can double-encrypting be easier to break then either algorithm on its own?

Error propagation in CBC mode

A patched SHA1 attempt for password verification

Found a way to crack AES-128, what now?

What was the NSA's reasoning for making their bitwise combination functions in SHA-1 the way they did?

Why do Feistel ciphers need round keys?

What happens if a nonce is reused in ChaCha20-Poly1305?