Demi's user avatar
Demi's user avatar
Demi's user avatar
Demi
  • Member for 8 years, 2 months
  • Last seen more than 2 years ago
7 votes
1 answer
278 views

IND-CCA2 post-quantum key exchange

3 votes
1 answer
238 views

Secure password-authenticated key exchange that allows for passwords to be stored as hashes, but does not make the hashes password-equivalent

2 votes
1 answer
466 views

Post-quantum authenticated key exchange with forward secrecy

2 votes
0 answers
95 views

Can quantum money exist?

4 votes
1 answer
553 views

Dilithium signature scheme and timing attacks – Does the running time actually depend on the secret key?

2 votes
2 answers
209 views

Arbitrary width pseudorandom permutation

1 vote
1 answer
74 views

Is it generally okay to substitute “like for like”?

4 votes
0 answers
558 views

Why is this scheme not IND-CCA2 secure

3 votes
1 answer
403 views

CCA2-secure encryption based on LWE/Ring-LWE

9 votes
1 answer
593 views

Converting NewHope/LWE key exchange to a Diffe-Hellman-like algorithm

0 votes
2 answers
111 views

Does QUIC use a 96-bit MAC tag? If so, what are the implications?

0 votes
0 answers
59 views

Authenticated file encryption scheme

1 vote
3 answers
135 views

Semantic constraints and authentication

10 votes
2 answers
7k views

Would SHA1 be broken by sheer brute force, even if it had no weaknesses of its own?

3 votes
1 answer
2k views

Is encrypt-and-MAC secure for AES-CTR + UMAC?

8 votes
1 answer
2k views

Is it necessary to worry about timing attacks when comparing SHA256 or Argon2 hashes?

4 votes
1 answer
384 views

Is this a good choice of a digital signature scheme?

2 votes
1 answer
575 views

Is this hash function almost XOR universal?

5 votes
1 answer
347 views

Do key-dependent S-boxes make efficient constant-time software implementations almost impossible?

12 votes
4 answers
834 views

Do I need to worry about timing attacks in Base64 encoding/decoding of private keys?

4 votes
1 answer
194 views

Padding schemes for asymmetric encryption with provable security in the standard model

4 votes
1 answer
234 views

Using a round function intended for an SP network in a Feistel network?

3 votes
1 answer
303 views

Differential & linear characteristics for integer multiplication

3 votes
1 answer
200 views

Can the attack against SHA-1 be parallelized?

2 votes
2 answers
437 views

Can I use a block cipher in CTR mode to generate keys from a master key?

5 votes
1 answer
207 views

Can one make a secure AEAD from any secure cipher and any secure MAC?

2 votes
1 answer
1k views

Is a KDF needed when using X25519 for ECDH and XChaCha20-Poly1305 for AEAD?

5 votes
1 answer
509 views

In Fortuna, can I use ChaCha20 instead of a block cipher and Blake2b instead of iterated SHA256?

1 vote
0 answers
321 views

Hash function with good performance on extremely short messages

3 votes
1 answer
73 views

How much does using the same $H$ for all messages weaken GCM?