Skip to main content
otus's user avatar
otus's user avatar
otus's user avatar
otus
  • Member for 9 years, 11 months
  • Last seen more than 2 years ago
46 votes
1 answer
7k views

What is a "freestart collision"?

7 votes
2 answers
6k views

Is there a standard way to use a nonce with HMAC?

6 votes
1 answer
2k views

How does the HOTP dynamic truncation function generalize to longer hashes?

2 votes
1 answer
1k views

Can the key-complement property of DES be used against 3DES?

7 votes
1 answer
1k views

Where is CFB-MAC defined?

6 votes
1 answer
1k views

What weaknesses in Hash_DRBG did NIST find and fix?

15 votes
3 answers
1k views

Does a partial preimage attack imply a preimage attack?

5 votes
1 answer
1k views

Parallelization of CFB mode encryption and decryption

5 votes
1 answer
980 views

Equivalent security of KMAC and different HMAC instances?

3 votes
1 answer
893 views

Is MAC-then-encrypt with stream ciphers secure?

6 votes
1 answer
745 views

Fast 128-bit MAC with second preimage resistance?

2 votes
2 answers
594 views

Password-based encrypted key storage?

10 votes
1 answer
584 views

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

4 votes
0 answers
513 views

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

8 votes
1 answer
371 views

How many degrees of freedom up my sleeve?

7 votes
1 answer
277 views

How can one detect if a hash function doesn't have a full image?

4 votes
1 answer
232 views

Is there a way to slow down collision attacks using iteration?

1 vote
1 answer
225 views

Ed25519 with R replaced by H(RAM)?