otus's user avatar
otus's user avatar
otus's user avatar
otus
  • Member for 9 years, 9 months
  • Last seen more than 1 year ago
46 votes
1 answer
7k views

What is a "freestart collision"?

15 votes
3 answers
1k views

Does a partial preimage attack imply a preimage attack?

10 votes
1 answer
573 views

Why is the whole initial state used in the final addition of Salsa20 and ChaCha?

8 votes
1 answer
371 views

How many degrees of freedom up my sleeve?

7 votes
1 answer
277 views

How can one detect if a hash function doesn't have a full image?

7 votes
2 answers
6k views

Is there a standard way to use a nonce with HMAC?

7 votes
1 answer
1k views

Where is CFB-MAC defined?

6 votes
1 answer
739 views

Fast 128-bit MAC with second preimage resistance?

6 votes
1 answer
2k views

How does the HOTP dynamic truncation function generalize to longer hashes?

6 votes
1 answer
1k views

What weaknesses in Hash_DRBG did NIST find and fix?

5 votes
1 answer
1k views

Parallelization of CFB mode encryption and decryption

5 votes
1 answer
968 views

Equivalent security of KMAC and different HMAC instances?

4 votes
1 answer
231 views

Is there a way to slow down collision attacks using iteration?

4 votes
0 answers
512 views

Can convergent encryption be turned into deterministic authenticated encryption with HMAC?

3 votes
1 answer
858 views

Is MAC-then-encrypt with stream ciphers secure?

2 votes
2 answers
588 views

Password-based encrypted key storage?

2 votes
1 answer
1k views

Can the key-complement property of DES be used against 3DES?

1 vote
1 answer
224 views

Ed25519 with R replaced by H(RAM)?