Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.
user avatar
user avatar
user avatar
Myria
  • Member for 7 years, 11 months
  • Last seen this week
15 votes
0 answers
314 views

Name of an archaic type of RSA padding (0BBBBBBB...)

11 votes
1 answer
672 views

Are DSA and ECDSA provably secure assuming DL security?

9 votes
1 answer
1k views

Does the security of RSA come from just the carries in multiplication?

9 votes
3 answers
3k views

Usage difference between x86 RDRAND and RDSEED

9 votes
2 answers
949 views

Are lookup tables safe when they fit in a cache line?

9 votes
0 answers
728 views

Are there attacks against broken RSA signature pad checking with $e = 65537$?

8 votes
1 answer
181 views

How to implement "online" feature of GCM?

8 votes
3 answers
1k views

Why is it good to split a CTR-mode counter into nonce and counter?

7 votes
2 answers
2k views

Is it possible to recover an RSA modulus from its signatures?

7 votes
1 answer
160 views

How bad is it to leak $k$ in RSA?

6 votes
2 answers
135 views

Does Poly1305 have weak keys like GCM/GHASH?

6 votes
1 answer
608 views

Attacking a hardware AES implementation if it leaks the intermediate round states

5 votes
1 answer
184 views

What security checks do I need for SRP-6a?

4 votes
1 answer
326 views

How rare are 1024-bit $B$-smooth numbers?

4 votes
1 answer
67 views

How to handle the extra 12451 elements in Sophie-Germain Counter Mode?

4 votes
2 answers
2k views

How common are weak RSA keys?

4 votes
1 answer
72 views

How many bits of an exponent are leaked when doing a powmod?

4 votes
2 answers
709 views

Is there a standard format for compact 56-bit DES keys?

4 votes
1 answer
1k views

Fast reduction in $GF(2^{128})$ using x86 `PCLMULQDQ`

3 votes
1 answer
757 views

Origin of the SHA-224 initial hash value?

3 votes
1 answer
156 views

Is having AES tables on a distinct physical page enough to avoid cache timing attacks?

3 votes
1 answer
104 views

Security issues with computing parallel hashes?

2 votes
1 answer
214 views

What would happen in DSA/ECDSA if there were a collision in $r$ but not $k$?

2 votes
0 answers
60 views

RSA: Blinding versus fixed-time computation

2 votes
1 answer
49 views

Is there an algorithm to compute the wNAF for an exponent faster than quadratic?

2 votes
0 answers
386 views

RSA signatures that allow hash to move around in block

1 vote
0 answers
76 views

Usefulness of ability to calculate $m^{p+q}$ with RSA

1 vote
1 answer
541 views

How to split up $GF(2^{128})$ into smaller fields?

1 vote
0 answers
52 views

Should Ed25519 verification multiply by the cofactor?

1 vote
1 answer
119 views

Lookup table for DSA/ECDSA/Schnorr multiplication