Skip to main content
Demi's user avatar
Demi's user avatar
Demi's user avatar
Demi
  • Member for 8 years, 6 months
  • Last seen more than a month ago
58 votes
2 answers
21k views

What advantages does Keccak/SHA-3 have over BLAKE2?

28 votes
1 answer
5k views

Examples of modern, widely used ciphers that suddenly fell?

13 votes
1 answer
3k views

What are the requirements of a key schedule?

13 votes
2 answers
2k views

Is CPU timing jitter a usable entropy source?

12 votes
4 answers
853 views

Do I need to worry about timing attacks in Base64 encoding/decoding of private keys?

10 votes
2 answers
7k views

Would SHA1 be broken by sheer brute force, even if it had no weaknesses of its own?

10 votes
1 answer
459 views

Are there any real protocols secure in the random oracle model that have been broken in practice?

9 votes
1 answer
611 views

Converting NewHope/LWE key exchange to a Diffe-Hellman-like algorithm

8 votes
1 answer
2k views

Is it necessary to worry about timing attacks when comparing SHA256 or Argon2 hashes?

8 votes
2 answers
1k views

Is it okay to use an HMAC of the plaintext and a (possibly distinct) key as the IV for symmetric cryptography?

8 votes
1 answer
2k views

How does TLS differ from SSH from a strictly cryptographic perspective?

7 votes
1 answer
423 views

Does "double RC4" exhibit the same weaknesses as standard RC4?

7 votes
1 answer
292 views

IND-CCA2 post-quantum key exchange

6 votes
1 answer
774 views

Can RSA-PSS signing be made deterministic without loss of security?

6 votes
1 answer
7k views

What happens if a nonce is reused in ChaCha20-Poly1305?

6 votes
1 answer
524 views

Do Carter–Wegman MACs allow key reuse if the MAC tag is kept secret?

5 votes
1 answer
353 views

Block cipher mode of operation with beyond-birthday-bound security

5 votes
1 answer
2k views

Is ChaCha12 considered 256-bit secure?

5 votes
1 answer
260 views

Does length-prepending stop length-extension attacks?

5 votes
2 answers
4k views

Is there any reason to use RSA or DSA when we have ECC?

5 votes
0 answers
217 views

Can an analog of ChaCha with 64-bit words be defined, and would it be secure? [duplicate]

5 votes
1 answer
348 views

Do key-dependent S-boxes make efficient constant-time software implementations almost impossible?

5 votes
1 answer
529 views

In Fortuna, can I use ChaCha20 instead of a block cipher and Blake2b instead of iterated SHA256?

5 votes
1 answer
210 views

Can one make a secure AEAD from any secure cipher and any secure MAC?

4 votes
1 answer
241 views

Using a round function intended for an SP network in a Feistel network?

4 votes
1 answer
196 views

Padding schemes for asymmetric encryption with provable security in the standard model

4 votes
0 answers
568 views

Why is this scheme not IND-CCA2 secure

4 votes
1 answer
385 views

Is this a good choice of a digital signature scheme?

4 votes
1 answer
583 views

Dilithium signature scheme and timing attacks – Does the running time actually depend on the secret key?

4 votes
0 answers
638 views

Password hashing in embedded systems