Cryptography
Gilles 'SO- stop being evil''s user avatar
Gilles 'SO- stop being evil''s user avatar
Gilles 'SO- stop being evil''s user avatar
Gilles 'SO- stop being evil'
  • Member for 12 years, 8 months
  • Last seen this week
Profile Activity

18 Questions

Score Activity Newest Views
47 votes
4 answers
35k views

Security strength of RSA in relation with the modulus size

24 votes
2 answers
5k views

Is H(k||length||x) a secure MAC construction?

12 votes
4 answers
5k views

Why should the RSA private exponent have the same size as the modulus?

9 votes
2 answers
4k views

Is RSA of a random nonce with no padding safe?

9 votes
2 answers
1k views

Why have hashes when you have MACs?

9 votes
1 answer
876 views

Deterministic RSA blinding

7 votes
2 answers
3k views

Choice of authenticated encryption mode for whole messages

6 votes
1 answer
318 views

Weakness of Hash_DRBG when entropy is mixed in gradually

6 votes
2 answers
2k views

Does RSA padding have to be unpredictable if the payload is?

6 votes
1 answer
685 views

Strategy for random CTR initial counter values

5 votes
2 answers
555 views

Cost of attacking Mobile OTP with a fake server

5 votes
1 answer
780 views

Intersection of two elliptic curves

5 votes
1 answer
685 views

Resistance against timing attacks of AES candidates

5 votes
1 answer
137 views

Robust CMAC-based key derivation function

4 votes
2 answers
2k views

DSA signatures with related k and unknown payloads

4 votes
1 answer
2k views

Does CBC encryption of a hash provide authenticity?

2 votes
1 answer
473 views

How do I validate Curve448 public keys?

1 vote
2 answers
297 views

Standard or guidance for entropy collection