Skip to main content
otus's user avatar
otus's user avatar
otus's user avatar
otus
  • Member for 9 years, 11 months
  • Last seen more than 2 years ago
15 votes
3 answers
1k views

Does a partial preimage attack imply a preimage attack?

46 votes
1 answer
7k views

What is a "freestart collision"?

4 votes
1 answer
233 views

Is there a way to slow down collision attacks using iteration?

5 votes
1 answer
980 views

Equivalent security of KMAC and different HMAC instances?

2 votes
1 answer
1k views

Can the key-complement property of DES be used against 3DES?

7 votes
1 answer
1k views

Where is CFB-MAC defined?

6 votes
1 answer
2k views

How does the HOTP dynamic truncation function generalize to longer hashes?

6 votes
1 answer
745 views

Fast 128-bit MAC with second preimage resistance?

4 votes
0 answers
513 views

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

10 votes
1 answer
584 views

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

5 votes
1 answer
1k views

Parallelization of CFB mode encryption and decryption

6 votes
1 answer
1k views

What weaknesses in Hash_DRBG did NIST find and fix?

8 votes
1 answer
371 views

How many degrees of freedom up my sleeve?

3 votes
1 answer
893 views

Is MAC-then-encrypt with stream ciphers secure?

2 votes
2 answers
594 views

Password-based encrypted key storage?

7 votes
2 answers
6k views

Is there a standard way to use a nonce with HMAC?

7 votes
1 answer
277 views

How can one detect if a hash function doesn't have a full image?

1 vote
1 answer
225 views

Ed25519 with R replaced by H(RAM)?