Neil Madden's user avatar
Neil Madden's user avatar
Neil Madden's user avatar
Neil Madden
  • Member for 8 years, 6 months
  • Last seen more than a month ago
15 votes
2 answers
3k views

Why is synthetic IV (SIV) mode considered deterministic authenticated encryption (DAE)?

9 votes
2 answers
2k views

Is it ever safe to use encryption with compression?

3 votes
1 answer
614 views

AEAD: Is it secure to decrypt the content encryption key before verifying the MAC?

3 votes
2 answers
321 views

Are there any misuse-resistant asymmetric encryption schemes?

3 votes
1 answer
582 views

RSA hybrid decryption via PKCS#11 - unwrap or decrypt?

3 votes
1 answer
479 views

Is there an increased risk of nonce reuse when using GCM with a nonce more than 96 bits?

1 vote
2 answers
309 views

Why does the RFC version of HKDF-Expand start the counter at 1?

1 vote
1 answer
135 views

Should the cSHAKE customization string ever be attacker-controlled?

1 vote
1 answer
930 views

Beyond birthday bound security in AES-GCM-SIV

1 vote
1 answer
353 views

Are there any authenticated stream ciphers that use the same PRF for MAC and cipher?