User fadedbee

18 votes

2 answers

11k views

Deterministically generate a RSA public/private key pair from a passphrase (with sufficient entropy)?

asked Mar 19, 2015 at 10:57

13 votes

2 answers

3k views

Encrypt-then-MAC: Do I need to authenticate the IV?

asked Mar 11, 2015 at 13:28

2 votes

1 answer

3k views

ECDSA for encryption

asked Mar 19, 2015 at 11:05

3 votes

3 answers

3k views

Any weakness when performing SHA-256 repeatedly? [duplicate]

asked Sep 30, 2014 at 12:18

0 votes

1 answer

2k views

Keeping the key and IV safe when AES256 encrypting publicly known data

asked Mar 9, 2015 at 10:58

5 votes

1 answer

2k views

Do aes_256_gcm IVs just need to be unique for that key?

asked Apr 19, 2018 at 11:57

2 votes

2 answers

2k views

Is there a relationship between the secp256k1 public key of the sum of two private keys, and the public keys of those original two private keys?

asked Sep 2, 2020 at 13:25

1 vote

1 answer

2k views

How to find the secret key and nonce from two messages encrypted using the same nonce?

asked Jul 11, 2017 at 21:35

5 votes

2 answers

1k views

Are curve secp256k1 ECDSA signatures distinguishable from random data?

asked Nov 21 at 7:43

3 votes

1 answer

1k views

Is there a standard for public key encrypting and signing short messages?

asked Aug 21, 2015 at 14:28

2 votes

2 answers

1k views

Is there a form of AES encryption where the cipher text matches the length of the clear text and does not show patterns?

asked Mar 2, 2017 at 13:12

3 votes

2 answers

1k views

Is it safe to XOR-combine hashes by rotating them first?

asked Aug 7, 2020 at 7:10

1 vote

1 answer

1k views

What is best practise for salting and multiple-hashing of passwords?

asked Nov 17, 2017 at 9:11

5 votes

2 answers

1k views

Why is ECIES complex?

asked Sep 10, 2015 at 15:36

1 vote

1 answer

1k views

Is the result of HMAC-sha256 distinguishable from random noise?

asked Feb 23, 2015 at 10:56

1 vote

2 answers

842 views

Need for secure hash function for a bloom filter

asked Nov 1, 2017 at 12:11

4 votes

2 answers

750 views

Why/how is libsodium/nacl's cryptobox repudiable?

asked Sep 24, 2016 at 16:21

1 vote

0 answers

748 views

AES256-GCM Is it safe to both add the IV to the AAD and use it in the encryption?

asked Jan 28, 2022 at 11:00

0 votes

1 answer

738 views

If you know the messages, and the results of HMAC(key, message) can you find the key?

asked Feb 23, 2015 at 13:07

1 vote

2 answers

728 views

Does the Blake3 hash have identities, due to its merkle tree structure?

asked Nov 27, 2020 at 6:23

4 votes

2 answers

572 views

Cryptographically strong seeded pseudo random number generator

asked Sep 7, 2017 at 7:54

3 votes

1 answer

552 views

Elliptic curves on finite fields

asked Jan 18, 2019 at 13:03

1 vote

1 answer

432 views

AES-128 or AES-256 with 18 bytes of key storage?

asked Jan 16, 2021 at 11:37

2 votes

1 answer

391 views

Do some Block Cipher Modes encrypt the nonce and then XOR it with the data?

asked Jun 2, 2021 at 12:30

3 votes

3 answers

321 views

Can you create an encryption algorithm from a signing algorithm, or vice versa?

asked Jun 23, 2021 at 11:14

1 vote

3 answers

285 views

Using sha3 as a deterministic source of psuedo-random bytes for xor encryption

asked Sep 19, 2020 at 6:56

3 votes

1 answer

234 views

Does ECDH on secp256k produce a defined shared secret for two key pairs, or is it implementation defined?

asked Jul 24 at 15:10

0 votes

1 answer

233 views

How to use OpenSSL to prove non-repudiation

asked Mar 21, 2022 at 8:50

1 vote

2 answers

224 views

Is it safe to sign message with a TLS private key?

asked Mar 23, 2022 at 13:02

2 votes

1 answer

222 views

What is the maths behind Bitcoin's BIP32?

asked Jul 2, 2020 at 21:46

Stack Exchange Network

42 Questions

Deterministically generate a RSA public/private key pair from a passphrase (with sufficient entropy)?

Encrypt-then-MAC: Do I need to authenticate the IV?

ECDSA for encryption

Any weakness when performing SHA-256 repeatedly? [duplicate]

Keeping the key and IV safe when AES256 encrypting publicly known data

Do aes_256_gcm IVs just need to be unique for that key?

Is there a relationship between the secp256k1 public key of the sum of two private keys, and the public keys of those original two private keys?

How to find the secret key and nonce from two messages encrypted using the same nonce?

Are curve secp256k1 ECDSA signatures distinguishable from random data?

Is there a standard for public key encrypting and signing short messages?

Is there a form of AES encryption where the cipher text matches the length of the clear text and does not show patterns?

Is it safe to XOR-combine hashes by rotating them first?

What is best practise for salting and multiple-hashing of passwords?

Why is ECIES complex?

Is the result of HMAC-sha256 distinguishable from random noise?

Need for secure hash function for a bloom filter

Why/how is libsodium/nacl's cryptobox repudiable?

AES256-GCM Is it safe to both add the IV to the AAD and use it in the encryption?

If you know the messages, and the results of HMAC(key, message) can you find the key?

Does the Blake3 hash have identities, due to its merkle tree structure?

Cryptographically strong seeded pseudo random number generator

Elliptic curves on finite fields

AES-128 or AES-256 with 18 bytes of key storage?

Do some Block Cipher Modes encrypt the nonce and then XOR it with the data?

Can you create an encryption algorithm from a signing algorithm, or vice versa?

Using sha3 as a deterministic source of psuedo-random bytes for xor encryption

Does ECDH on secp256k produce a defined shared secret for two key pairs, or is it implementation defined?

How to use OpenSSL to prove non-repudiation

Is it safe to sign message with a TLS private key?

What is the maths behind Bitcoin's BIP32?