User Evgeni Vaknin

10 votes

1 answer

3k views

Existential unforgeability vs strong unforgeability

asked Feb 6, 2020 at 14:05

9 votes

1 answer

1k views

Does blinding work against side channel on RSA?

asked Jan 17, 2018 at 9:31

6 votes

1 answer

443 views

What is the reason for length differences in RSA?

asked Jun 18, 2018 at 19:49

6 votes

1 answer

2k views

Diffusion in Stream Cipher

asked Dec 27, 2014 at 14:51

6 votes

1 answer

1k views

RSA PSS security advantage

asked Dec 3, 2018 at 11:20

5 votes

1 answer

774 views

Security of RSA-3072 with public exponent $2^{16}+1$

asked Jun 3, 2021 at 16:23

4 votes

4 answers

468 views

Mitigating Side Channel Attack (SCA)

asked May 6, 2018 at 19:52

3 votes

1 answer

2k views

Security of AES counter mode vs. CBC mode

asked Jul 31, 2017 at 6:44

3 votes

1 answer

353 views

Why is a random component needed for ECDH key pair generation in Mbed TLS?

asked Dec 8, 2020 at 7:48

3 votes

1 answer

4k views

KDF based on X9.63 vs. NIST SP800-108

asked Nov 26, 2018 at 16:30

3 votes

1 answer

640 views

NIST expression for HMAC security strength

asked Jul 15, 2022 at 13:33

2 votes

1 answer

91 views

Threshold implementation of ciphers

asked Oct 27, 2021 at 11:35

2 votes

1 answer

76 views

Public Key Calculation in LMS

asked Jun 26 at 7:16

2 votes

1 answer

2k views

How were the P-256 parameters chosen?

asked Jul 16, 2018 at 14:03

2 votes

0 answers

85 views

How the SW layer communicates with TPM?

asked Feb 10, 2018 at 10:23

2 votes

1 answer

362 views

X.509 strong authentication protocols

asked Apr 16, 2018 at 15:41

2 votes

0 answers

151 views

ECIES Authentication

asked Aug 21, 2018 at 11:37

2 votes

0 answers

943 views

AES-XTS Integrity protection

asked Oct 29, 2019 at 16:42

2 votes

0 answers

89 views

Why the salt is used as a key in the extract phase of HKDF?

asked Jun 11, 2020 at 19:32

1 vote

1 answer

63 views

Ranking "amount of randomization" in a sequence

asked Aug 12, 2020 at 7:55

1 vote

1 answer

82 views

Secret sharing by using just "private secrets"?

asked Oct 27, 2020 at 16:02

1 vote

1 answer

483 views

Winternitz One Time Signature

asked Jan 25, 2020 at 20:04

1 vote

2 answers

180 views

What is the connection between "replay attack" to CCA security?

asked Aug 7, 2018 at 7:06

1 vote

2 answers

504 views

What is the advantage of AES-GCM against CPA attack

asked Aug 25, 2017 at 14:56

1 vote

1 answer

1k views

SHACAL-2 vs. AES as underlying block cipher for Secure Hash (aka SHA-256)

asked Apr 25, 2015 at 10:37

1 vote

1 answer

312 views

why Niederreiter cryptosystem is not a candidate in NIST PQC competition?

asked Dec 14, 2020 at 9:31

0 votes

0 answers

94 views

MAC Security - MAC verification queries

asked Sep 28, 2021 at 11:03

0 votes

0 answers

99 views

Cryptographic strength of AES-GCM-256 for classical and Quantum

asked Apr 2 at 8:09

0 votes

1 answer

180 views

Adding a Random component to CBC MAC in order to enlarge the tag space

asked Apr 26, 2015 at 16:37

Stack Exchange Network

29 Questions

Existential unforgeability vs strong unforgeability

Does blinding work against side channel on RSA?

What is the reason for length differences in RSA?

Diffusion in Stream Cipher

RSA PSS security advantage

Security of RSA-3072 with public exponent $2^{16}+1$

Mitigating Side Channel Attack (SCA)

Security of AES counter mode vs. CBC mode

Why is a random component needed for ECDH key pair generation in Mbed TLS?

KDF based on X9.63 vs. NIST SP800-108

NIST expression for HMAC security strength

Threshold implementation of ciphers

Public Key Calculation in LMS

How were the P-256 parameters chosen?

How the SW layer communicates with TPM?

X.509 strong authentication protocols

ECIES Authentication

AES-XTS Integrity protection

Why the salt is used as a key in the extract phase of HKDF?

Ranking "amount of randomization" in a sequence

Secret sharing by using just "private secrets"?

Winternitz One Time Signature

What is the connection between "replay attack" to CCA security?

What is the advantage of AES-GCM against CPA attack

SHACAL-2 vs. AES as underlying block cipher for Secure Hash (aka SHA-256)

why Niederreiter cryptosystem is not a candidate in NIST PQC competition?

MAC Security - MAC verification queries

Cryptographic strength of AES-GCM-256 for classical and Quantum

Adding a Random component to CBC MAC in order to enlarge the tag space