User Melab

44 votes

2 answers

38k views

Is Triple DES still considered safe to use?

asked Sep 19, 2017 at 13:36

12 votes

1 answer

14k views

What is a universal hash function?

asked Nov 9, 2017 at 2:45

10 votes

1 answer

2k views

What is an extendable output function?

asked Dec 26, 2017 at 19:23

9 votes

2 answers

773 views

What asymmetric key exchange algorithms are known besides DH?

asked Apr 2, 2016 at 10:29

9 votes

2 answers

6k views

What is this "finite field cryptography"?

asked Apr 3, 2016 at 18:47

8 votes

2 answers

9k views

Explanation of each of the parameters used in ECC

asked Feb 13, 2015 at 3:05

7 votes

1 answer

599 views

Do other one-time signature schemes exist?

asked Mar 31, 2016 at 17:35

7 votes

1 answer

2k views

What is the security strength of an n-bit HMAC?

asked Apr 11, 2016 at 15:04

7 votes

2 answers

1k views

Post-quantum candidates for asymmetric cryptography with small key sizes

asked Dec 26, 2017 at 19:13

7 votes

3 answers

2k views

Why don't table lookups run in constant time?

asked Nov 29, 2017 at 17:00

6 votes

3 answers

632 views

Why is SIV a thing if MAC-and-encrypt is not the most secure way to go?

asked Jan 2, 2018 at 21:55

6 votes

2 answers

286 views

Possible problems in using a hash algorithm to construct a stream cipher

asked Apr 7, 2016 at 14:01

6 votes

3 answers

2k views

Weaknesses in ARX block ciphers

asked Sep 8, 2017 at 15:00

6 votes

1 answer

3k views

How does Boneh–Lynn–Shacham work?

asked Mar 4, 2016 at 18:57

6 votes

2 answers

1k views

Could an HMAC be used as a hash?

asked Jan 5, 2016 at 2:06

6 votes

3 answers

2k views

Inserting a backdoor into a cryptographic hash function

asked Apr 15, 2015 at 2:04

5 votes

1 answer

439 views

How do the constants in this implementation of AES match up with the algorithm?

asked Feb 4, 2017 at 19:00

5 votes

2 answers

3k views

If the output size of SHAKE128/256 is variable, why is the security fixed at 128/256?

asked Feb 9, 2017 at 0:10

5 votes

2 answers

912 views

A bijective hash function

asked Apr 17, 2016 at 3:45

5 votes

2 answers

479 views

Creating single-cycle permutations

asked Sep 25, 2017 at 7:20

5 votes

2 answers

887 views

Why do stream ciphers like A5/1 and ZUC have "frames"?

asked Jan 1, 2018 at 19:09

5 votes

0 answers

37 views

Tweakable Even-Mansour scheme where the block size is twice the key size?

asked Dec 11, 2017 at 5:04

4 votes

1 answer

254 views

Why does CTR mode become insecure after $2^{0.5 \times n}$ blocks?

asked Nov 30, 2017 at 17:08

4 votes

1 answer

177 views

What is the "standard model" for block ciphers?

asked Dec 5, 2017 at 2:24

4 votes

2 answers

2k views

How secure is the E0 stream cipher used in Bluetooth?

asked Jan 17, 2018 at 6:18

4 votes

1 answer

139 views

Why would we want parallelizable authentication?

asked Jan 23, 2018 at 22:31

4 votes

2 answers

824 views

When does a feedback shift register count as non-linear?

asked Oct 16, 2017 at 0:08

4 votes

0 answers

146 views

Creating an SPN cipher from ChaCha20 or Salsa20's double round function

asked Apr 22, 2016 at 13:20

4 votes

1 answer

1k views

Can (EC)DH keys be used as the signed content in X.509 certificates?

asked Mar 28, 2016 at 4:38

4 votes

2 answers

684 views

Alternative sources of random numbers

asked Feb 15, 2015 at 21:23

Stack Exchange Network

119 Questions

Is Triple DES still considered safe to use?

What is a universal hash function?

What is an extendable output function?

What asymmetric key exchange algorithms are known besides DH?

What is this "finite field cryptography"?

Explanation of each of the parameters used in ECC

Do other one-time signature schemes exist?

What is the security strength of an n-bit HMAC?

Post-quantum candidates for asymmetric cryptography with small key sizes

Why don't table lookups run in constant time?

Why is SIV a thing if MAC-and-encrypt is not the most secure way to go?

Possible problems in using a hash algorithm to construct a stream cipher

Weaknesses in ARX block ciphers

How does Boneh–Lynn–Shacham work?

Could an HMAC be used as a hash?

Inserting a backdoor into a cryptographic hash function

How do the constants in this implementation of AES match up with the algorithm?

If the output size of SHAKE128/256 is variable, why is the security fixed at 128/256?

A bijective hash function

Creating single-cycle permutations

Why do stream ciphers like A5/1 and ZUC have "frames"?

Tweakable Even-Mansour scheme where the block size is twice the key size?

Why does CTR mode become insecure after $2^{0.5 \times n}$ blocks?

What is the "standard model" for block ciphers?

How secure is the E0 stream cipher used in Bluetooth?

Why would we want parallelizable authentication?

When does a feedback shift register count as non-linear?

Creating an SPN cipher from ChaCha20 or Salsa20's double round function

Can (EC)DH keys be used as the signed content in X.509 certificates?

Alternative sources of random numbers