Tim McLean's user avatar
Tim McLean's user avatar
Tim McLean's user avatar
Tim McLean
  • Member for 9 years, 8 months
  • Last seen more than a month ago
  • Waterloo, Ontario, Canada
21 votes

HMAC vs ECDSA for JWT

19 votes
Accepted

Example of a PRP that is not a strong PRP

17 votes
Accepted

What Diffie-Hellman parameters should I use?

11 votes
Accepted

Nonce encryption with Poly1305-Chacha20

10 votes

Why is hybrid encryption more effective than other encryption scheme?

10 votes
Accepted

Why is Poly1305 popular given its 'sudden death' properties?

8 votes
Accepted

Is there a correct way to generate a symmetric key?

7 votes
Accepted

Computing the padding of MD5

7 votes
Accepted

Does the SHA-256 sum of a 256-bit key help you crack it?

6 votes

Example of a PRP that is not a strong PRP

6 votes

Signing Files vs. Signing File Hashes

5 votes
Accepted

Algorithm to transform plaintext to a key of desired keysize, when using input plaintext as key for FPE?

5 votes

What about using AES-ECB with random IV?

4 votes
Accepted

Block cipher block and key sizes

4 votes

Security of a parallelizable block cipher mode

4 votes
Accepted

Hash functions vs. keyed hash functions in the context of private key generation

3 votes
Accepted

AES-256 mode with per-block-key being a SHA-256 of SHA-256 of secret key, random public salt and block number. What's amiss?

3 votes

Self verifying hash algorithm

3 votes
Accepted

SHA-1: number of possible inputs, number of possible outputs, how many inputs have the same output,

3 votes

How long should a HMAC cryptographic key be?

2 votes
Accepted

Merkle tree (dm-verity) with SHA-256 vs. SHA-1

2 votes
Accepted

Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20

2 votes
Accepted

PBKDF2 for login key, scrypt for encryption key

2 votes
Accepted

On countermeasures for replay attacks. Does this one require plaint text password storage?

2 votes

One Time Pads and reuse of the decrypted message?

2 votes
Accepted

Is it interesting to design stream ciphers parametrized by a CSPRNG?

1 vote

How to detect changes in data while preserving confidentiality (under constraints)?

1 vote
Accepted

Is simple XOR with secret key using DHE secure?

1 vote

Is the warning given by chrome warranted?

1 vote

Avoiding replay attack on certified announcements