Cryptography
otus's user avatar
otus's user avatar
otus's user avatar
otus
  • Member for 9 years, 4 months
  • Last seen more than 1 year ago
Profile Activity

18 Questions

Score Activity Newest Views
46 votes
1 answer
7k views

What is a "freestart collision"?

15 votes
3 answers
1k views

Does a partial preimage attack imply a preimage attack?

10 votes
1 answer
518 views

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

8 votes
1 answer
366 views

How many degrees of freedom up my sleeve?

7 votes
1 answer
277 views

How can one detect if a hash function doesn't have a full image?

7 votes
1 answer
1k views

Where is CFB-MAC defined?

6 votes
1 answer
724 views

Fast 128-bit MAC with second preimage resistance?

6 votes
1 answer
2k views

How does the HOTP dynamic truncation function generalize to longer hashes?

6 votes
2 answers
5k views

Is there a standard way to use a nonce with HMAC?

6 votes
1 answer
1k views

What weaknesses in Hash_DRBG did NIST find and fix?

5 votes
1 answer
955 views

Parallelization of CFB mode encryption and decryption

5 votes
1 answer
939 views

Equivalent security of KMAC and different HMAC instances?

4 votes
1 answer
224 views

Is there a way to slow down collision attacks using iteration?

4 votes
0 answers
505 views

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

3 votes
1 answer
835 views

Is MAC-then-encrypt with stream ciphers secure?

2 votes
2 answers
583 views

Password-based encrypted key storage?

2 votes
1 answer
1k views

Can the key-complement property of DES be used against 3DES?

1 vote
1 answer
217 views

Ed25519 with R replaced by H(RAM)?

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.