Profile Activity

otus

Meta user

Network profile

Reputation

29,397

29.4k
21.8k
14.1k

2016
2017
2018
2019

Next tag badge

key-derivation

92/100 score

39/20 answers

Badges

137

Newest

Necromancer

Next badge

226/500

Impact

875 posts edited

196 helpful flags

4,678 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

18 Questions

Views Newest Activity Votes

votes

answer

views

What is a “freestart collision”?

Feb 23 '17 at 21:02 ddddavidee 2,981

votes

answers

773

views

Does a partial preimage attack imply a preimage attack?

hash preimage-resistance

Apr 10 at 21:29 Maarten Bodewes♦ 63.6k

votes

answer

311

views

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

algorithm-design salsa20 chacha

Jul 26 '15 at 10:42 Community♦ 1

votes

answer

319

views

How many degrees of freedom up my sleeve?

algorithm-design constants

Aug 9 '14 at 17:52 Community♦ 1

votes

answer

741

views

Where is CFB-MAC defined?

block-cipher reference-request mac modes-of-operation cfb

Feb 11 '16 at 15:50 Community♦ 1

votes

answer

243

views

How can one detect if a hash function doesn't have a full image?

hash collision-resistance

Jun 9 '14 at 23:58 D.W. 33.3k

votes

answer

views

What weaknesses in Hash_DRBG did NIST find and fix?

hash random-number-generator pseudo-random-generator standards

Sep 23 '14 at 14:17 otus 29.4k

votes

answer

520

views

Equivalent security of KMAC and different HMAC instances?

hmac mac sha-3 kmac

Aug 10 '16 at 19:01 Luis Casillas 10.8k

votes

answer

294

views

Fast 128-bit MAC with second preimage resistance?

authentication mac 2nd-preimage-resistance

Sep 10 '15 at 14:48 Yehuda Lindell 19.7k

votes

answers

views

Is there a standard way to use a nonce with HMAC?

hash hmac reference-request standards nonce

Jun 30 '14 at 15:28 Maarten Bodewes♦ 63.6k

votes

answer

187

views

Is there a way to slow down collision attacks using iteration?

hash algorithm-design collision-resistance brute-force-attack

Oct 6 '16 at 11:51 tylo 10.8k

votes

answers

435

views

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

algorithm-design authenticated-encryption deterministic-encryption convergent-encryption

Aug 12 '15 at 9:20 otus 29.4k

votes

answer

414

views

Parallelization of CFB mode encryption and decryption

implementation modes-of-operation cfb

Jul 9 '15 at 14:20 cygnusv 4,402

votes

answer

955

views

How does the HOTP dynamic truncation function generalize to longer hashes?

hmac reference-request sha-256 sha-512 hotp

Sep 14 '15 at 9:58 Community♦ 1

votes

answer

495

views

Can the key-complement property of DES be used against 3DES?

keys des 3des meet-in-the-middle-attack

Apr 27 '16 at 15:42 Community♦ 1

votes

answer

461

views

Is MAC-then-encrypt with stream ciphers secure?

mac stream-cipher authenticated-encryption forgery

Jul 24 '14 at 15:57 Community♦ 1

votes

answers

428

views

Password-based encrypted key storage?

encryption aes keys pbkdf-2 standards

Jul 7 '14 at 23:30 D.W. 33.3k

vote

answer

185

views

Ed25519 with R replaced by H(RAM)?

signature ed25519

May 20 '14 at 2:16 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

18 Questions

What is a “freestart collision”?

Does a partial preimage attack imply a preimage attack?

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

How many degrees of freedom up my sleeve?

Where is CFB-MAC defined?

How can one detect if a hash function doesn't have a full image?

What weaknesses in Hash_DRBG did NIST find and fix?

Equivalent security of KMAC and different HMAC instances?

Fast 128-bit MAC with second preimage resistance?

Is there a standard way to use a nonce with HMAC?

Is there a way to slow down collision attacks using iteration?

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

Parallelization of CFB mode encryption and decryption

How does the HOTP dynamic truncation function generalize to longer hashes?

Can the key-complement property of DES be used against 3DES?

Is MAC-then-encrypt with stream ciphers secure?

Password-based encrypted key storage?

Ed25519 with R replaced by H(RAM)?