Network profile

otus

Reputation

30,487

30.5k
27.6k
24.7k

2018
2019
2020
2021

Next tag badge

key-derivation

96/100 score

39/20 answers

Badges

145

Newest

Necromancer

Next badge

226/500

Impact

875 posts edited

196 helpful flags

4,680 votes cast

18 Questions

Votes Activity Newest Views

votes

answer

views

What is a “freestart collision”?

Feb 23 '17 at 21:02 Community♦ 1

votes

answers

948

views

Does a partial preimage attack imply a preimage attack?

hash preimage-resistance

Apr 10 '19 at 21:29 Maarten Bodewes♦ 77.3k

votes

answer

351

views

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

algorithm-design salsa20 chacha

Jul 26 '15 at 10:42 Community♦ 1

votes

answer

338

views

How many degrees of freedom up my sleeve?

algorithm-design constants

Aug 9 '14 at 17:52 Community♦ 1

votes

answer

902

views

Where is CFB-MAC defined?

block-cipher reference-request mac modes-of-operation cfb

Feb 11 '16 at 15:50 Community♦ 1

votes

answer

269

views

How can one detect if a hash function doesn't have a full image?

hash collision-resistance

Jun 9 '14 at 23:58 D.W. 34.5k

votes

answer

529

views

Fast 128-bit MAC with second preimage resistance?

authentication mac 2nd-preimage-resistance

Sep 10 '15 at 14:48 Yehuda Lindell 24.9k

votes

answer

views

What weaknesses in Hash_DRBG did NIST find and fix?

hash random-number-generator pseudo-random-generator standards

Sep 23 '14 at 14:17 otus 30.5k

votes

answer

667

views

Equivalent security of KMAC and different HMAC instances?

hmac mac sha-3 kmac

Aug 10 '16 at 19:01 Luis Casillas 13.4k

votes

answer

views

How does the HOTP dynamic truncation function generalize to longer hashes?

hmac reference-request sha-256 sha-512 hotp

Sep 14 '15 at 9:58 Community♦ 1

votes

answers

views

Is there a standard way to use a nonce with HMAC?

hash hmac reference-request standards nonce

Jun 30 '14 at 15:28 Maarten Bodewes♦ 77.3k

votes

answer

195

views

Is there a way to slow down collision attacks using iteration?

hash algorithm-design collision-resistance brute-force-attack

Oct 6 '16 at 11:51 tylo 11.7k

votes

answers

466

views

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

algorithm-design authenticated-encryption deterministic-encryption convergent-encryption

Aug 12 '15 at 9:20 otus 30.5k

votes

answer

581

views

Parallelization of CFB mode encryption and decryption

implementation modes-of-operation cfb

Jul 9 '15 at 14:20 cygnusv 4,627

votes

answer

760

views

Can the key-complement property of DES be used against 3DES?

keys des 3des meet-in-the-middle-attack

Apr 27 '16 at 15:42 Community♦ 1

votes

answer

622

views

Is MAC-then-encrypt with stream ciphers secure?

mac stream-cipher authenticated-encryption forgery

Jul 24 '14 at 15:57 Community♦ 1

votes

answers

514

views

Password-based encrypted key storage?

encryption aes keys pbkdf-2 standards

Jul 7 '14 at 23:30 D.W. 34.5k

vote

answer

198

views

Ed25519 with R replaced by H(RAM)?

signature ed25519

May 20 '14 at 2:16 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

18 Questions

What is a “freestart collision”?

Does a partial preimage attack imply a preimage attack?

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

How many degrees of freedom up my sleeve?

Where is CFB-MAC defined?

How can one detect if a hash function doesn't have a full image?

Fast 128-bit MAC with second preimage resistance?

What weaknesses in Hash_DRBG did NIST find and fix?

Equivalent security of KMAC and different HMAC instances?

How does the HOTP dynamic truncation function generalize to longer hashes?

Is there a standard way to use a nonce with HMAC?

Is there a way to slow down collision attacks using iteration?

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

Parallelization of CFB mode encryption and decryption

Can the key-complement property of DES be used against 3DES?

Is MAC-then-encrypt with stream ciphers secure?

Password-based encrypted key storage?

Ed25519 with R replaced by H(RAM)?