User Evgeni Vaknin

10 votes

1 answer

3k views

Existential unforgeability vs strong unforgeability

asked Feb 6, 2020 at 14:05

9 votes

1 answer

1k views

Does blinding work against side channel on RSA?

asked Jan 17, 2018 at 9:31

6 votes

1 answer

436 views

What is the reason for length differences in RSA?

asked Jun 18, 2018 at 19:49

6 votes

1 answer

1k views

RSA PSS security advantage

asked Dec 3, 2018 at 11:20

5 votes

1 answer

2k views

Diffusion in Stream Cipher

asked Dec 27, 2014 at 14:51

5 votes

1 answer

655 views

Security of RSA-3072 with public exponent $2^{16}+1$

asked Jun 3, 2021 at 16:23

4 votes

4 answers

435 views

Mitigating Side Channel Attack (SCA)

asked May 6, 2018 at 19:52

3 votes

1 answer

2k views

Security of AES counter mode vs. CBC mode

asked Jul 31, 2017 at 6:44

3 votes

1 answer

324 views

Why is a random component needed for ECDH key pair generation in Mbed TLS?

asked Dec 8, 2020 at 7:48

3 votes

1 answer

3k views

KDF based on X9.63 vs. NIST SP800-108

asked Nov 26, 2018 at 16:30

3 votes

1 answer

468 views

NIST expression for HMAC security strength

asked Jul 15, 2022 at 13:33

2 votes

1 answer

76 views

Threshold implementation of ciphers

asked Oct 27, 2021 at 11:35

2 votes

1 answer

2k views

How were the P-256 parameters chosen?

asked Jul 16, 2018 at 14:03

2 votes

0 answers

84 views

How the SW layer communicates with TPM?

asked Feb 10, 2018 at 10:23

2 votes

1 answer

338 views

X.509 strong authentication protocols

asked Apr 16, 2018 at 15:41

2 votes

0 answers

139 views

ECIES Authentication

asked Aug 21, 2018 at 11:37

2 votes

0 answers

799 views

AES-XTS Integrity protection

asked Oct 29, 2019 at 16:42

2 votes

0 answers

76 views

Why the salt is used as a key in the extract phase of HKDF?

asked Jun 11, 2020 at 19:32

1 vote

1 answer

60 views

Ranking "amount of randomization" in a sequence

asked Aug 12, 2020 at 7:55

1 vote

1 answer

79 views

Secret sharing by using just "private secrets"?

asked Oct 27, 2020 at 16:02

1 vote

1 answer

284 views

Winternitz One Time Signature

asked Jan 25, 2020 at 20:04

1 vote

2 answers

170 views

What is the connection between "replay attack" to CCA security?

asked Aug 7, 2018 at 7:06

1 vote

2 answers

493 views

What is the advantage of AES-GCM against CPA attack

asked Aug 25, 2017 at 14:56

1 vote

1 answer

1k views

SHACAL-2 vs. AES as underlying block cipher for Secure Hash (aka SHA-256)

asked Apr 25, 2015 at 10:37

1 vote

1 answer

247 views

why Niederreiter cryptosystem is not a candidate in NIST PQC competition?

asked Dec 14, 2020 at 9:31

0 votes

0 answers

89 views

MAC Security - MAC verification queries

asked Sep 28, 2021 at 11:03

0 votes

1 answer

165 views

Adding a Random component to CBC MAC in order to enlarge the tag space

asked Apr 26, 2015 at 16:37

Stack Exchange Network

27 Questions

Existential unforgeability vs strong unforgeability

Does blinding work against side channel on RSA?

What is the reason for length differences in RSA?

RSA PSS security advantage

Diffusion in Stream Cipher

Security of RSA-3072 with public exponent $2^{16}+1$

Mitigating Side Channel Attack (SCA)

Security of AES counter mode vs. CBC mode

Why is a random component needed for ECDH key pair generation in Mbed TLS?

KDF based on X9.63 vs. NIST SP800-108

NIST expression for HMAC security strength

Threshold implementation of ciphers

How were the P-256 parameters chosen?

How the SW layer communicates with TPM?

X.509 strong authentication protocols

ECIES Authentication

AES-XTS Integrity protection

Why the salt is used as a key in the extract phase of HKDF?

Ranking "amount of randomization" in a sequence

Secret sharing by using just "private secrets"?

Winternitz One Time Signature

What is the connection between "replay attack" to CCA security?

What is the advantage of AES-GCM against CPA attack

SHACAL-2 vs. AES as underlying block cipher for Secure Hash (aka SHA-256)

why Niederreiter cryptosystem is not a candidate in NIST PQC competition?

MAC Security - MAC verification queries

Adding a Random component to CBC MAC in order to enlarge the tag space