User kelalaka

35 votes

5 answers

12k views

The GCD strikes back to RSA in 2019 - Good randomness is the only solution?

asked Jan 1, 2020 at 20:42

26 votes

7 answers

6k views

Does Terra Quantum AG break AES and Hash Algorithms?

asked Feb 7, 2021 at 20:09

18 votes

1 answer

12k views

In 2020, SHA-1 practically broken in chosen-prefix collision (CP-collision). Can double SHA-1 hashing prevent CP-collision?

asked Jan 7, 2020 at 17:24

18 votes

1 answer

2k views

What is the new attack on OCB2 and how does it work?

asked Nov 1, 2018 at 9:57

18 votes

0 answers

425 views

The aftermath and considerations of the new record of 30750-Bit Binary Field Discrete Logarithm - 2020

asked Aug 11, 2020 at 21:17

16 votes

3 answers

3k views

Why Quantum Key Distribution (QKD) is impractical

asked Sep 1, 2021 at 13:35

14 votes

1 answer

1k views

What the X stands for in the front of Elliptic curve names like X25519

asked Oct 8, 2020 at 15:11

13 votes

1 answer

2k views

What issues are there while using Linux's /dev/urandom for generating cryptographic keys?

asked Oct 13, 2020 at 9:07

13 votes

0 answers

668 views

The backdoor of Telegram on Diffie-Hellman Key Exchange and possibly other examples?

asked Jan 14, 2021 at 13:31

10 votes

1 answer

567 views

Who is the inventor of the OFB block cipher mode of operation?

asked Jan 27, 2022 at 19:34

10 votes

2 answers

868 views

Perfect Steganography

asked Sep 17, 2018 at 15:57

9 votes

1 answer

3k views

The 9 lives of Bleichenbacher's CAT, it puts another scratch again

asked Dec 7, 2018 at 13:15

9 votes

2 answers

2k views

Why does NIST want 112-bit security from 128-bit key size for lightweight cryptography?

asked Dec 20, 2020 at 22:33

9 votes

0 answers

240 views

Are there any weak nonce-misuse resistant encryption scheme?

asked Jul 26, 2020 at 12:56

9 votes

2 answers

629 views

What is TPMFail attack and what are the countermeasures?

asked Nov 15, 2019 at 14:57

8 votes

2 answers

1k views

What are other good attack examples that use the hash collision?

asked Dec 22, 2020 at 16:29

8 votes

2 answers

3k views

Is there a pseudo message that will encrypt and decrypt correctly if one of the primes is a pseudo prime in RSA

asked Aug 24, 2020 at 20:43

7 votes

2 answers

407 views

Why does NIST say that 2nd preimage resistance depends on the message length

asked Dec 28, 2020 at 19:14

7 votes

2 answers

3k views

How to avoid side channel attacks when handling large numbers?

asked Nov 7, 2018 at 11:07

6 votes

1 answer

608 views

Who said "32 round Rijndael" in the third AES Conference

asked Nov 12, 2018 at 19:28

6 votes

1 answer

517 views

Are there any non Canonical Verifiable Cryptographic MACs

asked Nov 14, 2018 at 17:39

6 votes

2 answers

3k views

GMAC vs HMAC in message forgery and bandwidth

asked Dec 13, 2018 at 13:11

6 votes

1 answer

1k views

Is forward secrecy overhyped or necessary?

asked Feb 8, 2019 at 19:32

6 votes

1 answer

397 views

What information is revealed if we send our points in Projective Coordinates?

asked Aug 31, 2020 at 10:14

6 votes

2 answers

402 views

Definition of $x^u \bmod k$

asked Jul 11, 2020 at 17:03

6 votes

1 answer

459 views

What is the ChainOfFools/CurveBall Attack on ECDSA on Windows 10 CryptoAPI

asked Aug 9, 2020 at 20:23

6 votes

1 answer

203 views

Is there a library that output LFSR images given parameters?

asked May 6, 2021 at 14:29

5 votes

1 answer

180 views

What are the misconceptions of IBM's CEO Arvind Krishna talk on the "Axios on HBO" about the quantum computing

asked Nov 16, 2021 at 16:47

5 votes

2 answers

586 views

Must a line hitting two points on the elliptic curve over a finite field hit another point by continuation?

asked Jan 15, 2021 at 15:21

5 votes

1 answer

618 views

What is the Lord of the Ring(s): Side Channel Attack and What are the results

asked Mar 8, 2021 at 14:22

Stack Exchange Network

55 Questions

The GCD strikes back to RSA in 2019 - Good randomness is the only solution?

Does Terra Quantum AG break AES and Hash Algorithms?

In 2020, SHA-1 practically broken in chosen-prefix collision (CP-collision). Can double SHA-1 hashing prevent CP-collision?

What is the new attack on OCB2 and how does it work?

The aftermath and considerations of the new record of 30750-Bit Binary Field Discrete Logarithm - 2020

Why Quantum Key Distribution (QKD) is impractical

What the X stands for in the front of Elliptic curve names like X25519

What issues are there while using Linux's /dev/urandom for generating cryptographic keys?

The backdoor of Telegram on Diffie-Hellman Key Exchange and possibly other examples?

Who is the inventor of the OFB block cipher mode of operation?

Perfect Steganography

The 9 lives of Bleichenbacher's CAT, it puts another scratch again

Why does NIST want 112-bit security from 128-bit key size for lightweight cryptography?

Are there any weak nonce-misuse resistant encryption scheme?

What is TPMFail attack and what are the countermeasures?

What are other good attack examples that use the hash collision?

Is there a pseudo message that will encrypt and decrypt correctly if one of the primes is a pseudo prime in RSA

Why does NIST say that 2nd preimage resistance depends on the message length

How to avoid side channel attacks when handling large numbers?

Who said "32 round Rijndael" in the third AES Conference

Are there any non Canonical Verifiable Cryptographic MACs

GMAC vs HMAC in message forgery and bandwidth

Is forward secrecy overhyped or necessary?

What information is revealed if we send our points in Projective Coordinates?

Definition of $x^u \bmod k$

What is the ChainOfFools/CurveBall Attack on ECDSA on Windows 10 CryptoAPI

Is there a library that output LFSR images given parameters?

What are the misconceptions of IBM's CEO Arvind Krishna talk on the "Axios on HBO" about the quantum computing

Must a line hitting two points on the elliptic curve over a finite field hit another point by continuation?

What is the Lord of the Ring(s): Side Channel Attack and What are the results