Neil Madden's user avatar
Neil Madden's user avatar
Neil Madden's user avatar
Neil Madden
  • Member for 8 years, 3 months
  • Last seen more than a week ago
15 votes
2 answers
3k views

Why is synthetic IV (SIV) mode considered deterministic authenticated encryption (DAE)?

9 votes
2 answers
2k views

Is it ever safe to use encryption with compression?

3 votes
1 answer
612 views

AEAD: Is it secure to decrypt the content encryption key before verifying the MAC?

3 votes
2 answers
310 views

Are there any misuse-resistant asymmetric encryption schemes?

3 votes
1 answer
574 views

RSA hybrid decryption via PKCS#11 - unwrap or decrypt?

3 votes
1 answer
439 views

Is there an increased risk of nonce reuse when using GCM with a nonce more than 96 bits?

1 vote
2 answers
299 views

Why does the RFC version of HKDF-Expand start the counter at 1?

1 vote
1 answer
124 views

Should the cSHAKE customization string ever be attacker-controlled?

1 vote
1 answer
828 views

Beyond birthday bound security in AES-GCM-SIV

1 vote
1 answer
348 views

Are there any authenticated stream ciphers that use the same PRF for MAC and cipher?