User fadedbee

18 votes

2 answers

11k views

Deterministically generate a RSA public/private key pair from a passphrase (with sufficient entropy)?

asked Mar 19, 2015 at 10:57

13 votes

2 answers

3k views

Encrypt-then-MAC: Do I need to authenticate the IV?

asked Mar 11, 2015 at 13:28

5 votes

2 answers

1k views

Why is ECIES complex?

asked Sep 10, 2015 at 15:36

5 votes

1 answer

2k views

Do aes_256_gcm IVs just need to be unique for that key?

asked Apr 19, 2018 at 11:57

5 votes

2 answers

1k views

Are curve secp256k1 ECDSA signatures distinguishable from random data?

asked Nov 21 at 7:43

4 votes

2 answers

750 views

Why/how is libsodium/nacl's cryptobox repudiable?

asked Sep 24, 2016 at 16:21

4 votes

2 answers

573 views

Cryptographically strong seeded pseudo random number generator

asked Sep 7, 2017 at 7:54

3 votes

1 answer

1k views

Is there a standard for public key encrypting and signing short messages?

asked Aug 21, 2015 at 14:28

3 votes

3 answers

3k views

Any weakness when performing SHA-256 repeatedly? [duplicate]

asked Sep 30, 2014 at 12:18

3 votes

1 answer

553 views

Elliptic curves on finite fields

asked Jan 18, 2019 at 13:03

3 votes

3 answers

323 views

Can you create an encryption algorithm from a signing algorithm, or vice versa?

asked Jun 23, 2021 at 11:14

3 votes

1 answer

235 views

Does ECDH on secp256k produce a defined shared secret for two key pairs, or is it implementation defined?

asked Jul 24 at 15:10

3 votes

2 answers

1k views

Is it safe to XOR-combine hashes by rotating them first?

asked Aug 7, 2020 at 7:10

2 votes

2 answers

2k views

Is there a relationship between the secp256k1 public key of the sum of two private keys, and the public keys of those original two private keys?

asked Sep 2, 2020 at 13:25

2 votes

1 answer

222 views

What is the maths behind Bitcoin's BIP32?

asked Jul 2, 2020 at 21:46

2 votes

1 answer

85 views

What is the best way of deterministically choosing N of M, given 32 bytes of sha256?

asked Jul 13, 2020 at 21:17

2 votes

2 answers

54 views

Does selectively generating keypairs with particular public-key hash prefix weaken the security?

asked Jul 23, 2020 at 20:14

2 votes

1 answer

94 views

Does using only one sign of secp256k1 publc keys weaken security?

asked Aug 22 at 7:49

2 votes

1 answer

3k views

ECDSA for encryption

asked Mar 19, 2015 at 11:05

2 votes

2 answers

1k views

Is there a form of AES encryption where the cipher text matches the length of the clear text and does not show patterns?

asked Mar 2, 2017 at 13:12

2 votes

0 answers

137 views

Is it possible to enumerate the possible RSA keys? [duplicate]

asked May 4, 2016 at 9:09

2 votes

1 answer

391 views

Do some Block Cipher Modes encrypt the nonce and then XOR it with the data?

asked Jun 2, 2021 at 12:30

1 vote

2 answers

225 views

Is it safe to sign message with a TLS private key?

asked Mar 23, 2022 at 13:02

1 vote

1 answer

89 views

Is there any point in extending an 80-bit key before using it for HMAC-SHA256?

asked Dec 14, 2022 at 8:55

1 vote

1 answer

2k views

How to find the secret key and nonce from two messages encrypted using the same nonce?

asked Jul 11, 2017 at 21:35

1 vote

2 answers

842 views

Need for secure hash function for a bloom filter

asked Nov 1, 2017 at 12:11

1 vote

1 answer

1k views

What is best practise for salting and multiple-hashing of passwords?

asked Nov 17, 2017 at 9:11

1 vote

1 answer

180 views

Can sending the same plaintext twice, each encrypted with different key and IV, weaken the encryption?

asked Mar 22, 2018 at 11:20

1 vote

1 answer

1k views

Is the result of HMAC-sha256 distinguishable from random noise?

asked Feb 23, 2015 at 10:56

1 vote

1 answer

68 views

Equality between encrypted hash of data and hash of encrypted data?

asked Oct 13 at 12:52

Stack Exchange Network

42 Questions

Deterministically generate a RSA public/private key pair from a passphrase (with sufficient entropy)?

Encrypt-then-MAC: Do I need to authenticate the IV?

Why is ECIES complex?

Do aes_256_gcm IVs just need to be unique for that key?

Are curve secp256k1 ECDSA signatures distinguishable from random data?

Why/how is libsodium/nacl's cryptobox repudiable?

Cryptographically strong seeded pseudo random number generator

Is there a standard for public key encrypting and signing short messages?

Any weakness when performing SHA-256 repeatedly? [duplicate]

Elliptic curves on finite fields

Can you create an encryption algorithm from a signing algorithm, or vice versa?

Does ECDH on secp256k produce a defined shared secret for two key pairs, or is it implementation defined?

Is it safe to XOR-combine hashes by rotating them first?

Is there a relationship between the secp256k1 public key of the sum of two private keys, and the public keys of those original two private keys?

What is the maths behind Bitcoin's BIP32?

What is the best way of deterministically choosing N of M, given 32 bytes of sha256?

Does selectively generating keypairs with particular public-key hash prefix weaken the security?

Does using only one sign of secp256k1 publc keys weaken security?

ECDSA for encryption

Is there a form of AES encryption where the cipher text matches the length of the clear text and does not show patterns?

Is it possible to enumerate the possible RSA keys? [duplicate]

Do some Block Cipher Modes encrypt the nonce and then XOR it with the data?

Is it safe to sign message with a TLS private key?

Is there any point in extending an 80-bit key before using it for HMAC-SHA256?

How to find the secret key and nonce from two messages encrypted using the same nonce?

Need for secure hash function for a bloom filter

What is best practise for salting and multiple-hashing of passwords?

Can sending the same plaintext twice, each encrypted with different key and IV, weaken the encryption?

Is the result of HMAC-sha256 distinguishable from random noise?

Equality between encrypted hash of data and hash of encrypted data?