Skip to main content
yyyyyyy's user avatar
yyyyyyy's user avatar
yyyyyyy's user avatar
yyyyyyy
  • Member for 9 years, 7 months
  • Last seen this week
  • 🫠
207 votes
Accepted

Why does my SSH private key still work after changing some bytes in the file?

75 votes
Accepted

Second pre-image resistance vs Collision resistance

65 votes

How come hash salt doesn't make a hash ineffective?

52 votes

How do we know a cryptographic primitive won't suddenly fail?

38 votes
Accepted

If a hash function $H$ is collision resistant, is it true that $H(x)\neq H(x')$ for all messages $x, x'$ with $x \neq x'$?

33 votes
Accepted

How does ECDH arrive on a shared secret?

29 votes
Accepted

How to determine the order of an elliptic curve group from its parameters?

25 votes
Accepted

Encrypt-then-MAC: Do I need to authenticate the IV?

20 votes
Accepted

What is the difference between Shannon entropy and saying that tossing a 6-sided die 100 times has more than 256-bit entropy?

15 votes

Why is factoring $p-1$ easy when $p$ is a safe prime?

13 votes

Is double hashing collision resistant?

13 votes
Accepted

What are the practical implications of ciphertext distinguishability?

13 votes
Accepted

Why isn't outputting only a portion of the hash state a simple defense against length extension attacks?

13 votes

Must RSA exponent and modulus be odd

12 votes
Accepted

Can multiple public keys lead to the same shared secret in X25519?

12 votes

In a group, is it hard to calculate the base $g$ given $g^a$ and $a$?

11 votes

What is the difference between CSPRNG and PRNG?

11 votes
Accepted

Does RSA operate over a Finite Field (Galois Field)?

11 votes

Algorithms for Cyrillic encryption

11 votes
Accepted

33c3ctf beeblebrox RSA Sign challenge: any tipps?

11 votes
Accepted

Why is the Lovász condition used in the LLL algorithm?

10 votes

Are "non-mathematical" encryption algorithms comparably secure against brute force key recovery?

10 votes

Does composing multiple substitution ciphers improve security?

10 votes

AES Inverse Key Schedule

10 votes

lcm versus phi in RSA

10 votes
Accepted

Does an encrypted random sequence conserve its "randomness"?

10 votes
Accepted

How to calculate AES logarithm table?

9 votes

Chosen plaintext vs Chosen ciphertext

9 votes

Point decompression on an elliptic curve

8 votes
Accepted

Extending pseudorandom generator by one bit using exclusive-or of previous bits

1
2 3 4 5