Luis Casillas
  • Member for 5 years, 9 months
  • Last seen this week
13 answers
400 votes
154k views
316 bookmarks
Should we MAC-then-encrypt or encrypt-then-MAC?
4 answers
110 votes
74k views
65 bookmarks
How should I calculate the entropy of a password?
2 answers
53 votes
12k views
28 bookmarks
Timing attack and good coding practices
4 answers
35 votes
39k views
17 bookmarks
Why is CBC with predictable IV considered insecure against chosen-plaintext attack?
4 answers
35 votes
21k views
31 bookmarks
Galois fields in cryptography
2 answers
34 votes
5k views
27 bookmarks
What are recommended, general strategies to start block-cipher design and/or analysis?
2 answers
32 votes
13k views
7 bookmarks
Why do we need special key-wrap algorithms?
1 answers
28 votes
5k views
10 bookmarks
Examples of modern, widely used ciphers that suddenly fell?
2 answers
26 votes
24k views
18 bookmarks
HMAC vs MAC functions
3 answers
15 votes
1k views
5 bookmarks
Does a partial preimage attack imply a preimage attack?
2 answers
14 votes
1k views
7 bookmarks
How to derive two keys from one password
2 answers
13 votes
3k views
4 bookmarks
Why is synthetic IV (SIV) mode considered deterministic authenticated encryption (DAE)?
1 answers
9 votes
4k views
6 bookmarks
Can I use a HMAC for Replay Attack protection?
2 answers
7 votes
667 views
2 bookmarks
Scrypt not "old enough" to be safe?
1 answers
6 votes
156 views
1 bookmarks
Generally accepted standard(s) for key managment?
1 answers
3 votes
227 views
2 bookmarks
Security proof for CBC as a prefix-free PRF