User D.W.

114 votes

Accepted

Should we sign-then-encrypt, or encrypt-then-sign?

answered Nov 23, 2012 at 23:24

61 votes

Accepted

Why does nobody use (or break) the Camellia Cipher?

answered Aug 20, 2011 at 1:51

55 votes

Accepted

One Encryption, Many Decryption Keys

answered Aug 17, 2016 at 0:50

52 votes

Accepted

Explaining weakness of Dual EC DRBG to wider audience?

answered Sep 18, 2013 at 23:17

45 votes

Now that quantum computers have been out for a while, has RSA been cracked?

answered Aug 19, 2011 at 5:16

42 votes

Accepted

What are the differences Between “White-Box Cryptography” and “Code Obfuscation”?

answered Aug 12, 2011 at 20:20

41 votes

Is AES-256 weaker than 192 and 128 bit versions?

answered Oct 22, 2012 at 5:33

40 votes

Accepted

Blum Blum Shub vs. AES-CTR or other CSPRNGs

answered Aug 3, 2012 at 22:36

40 votes

Why does key generation take an input $1^k$, and how do I represent it in practice?

answered May 1, 2013 at 19:57

32 votes

Purpose of outer key in HMAC

answered Jul 29, 2012 at 22:51

29 votes

repeating-key xor and hamming distance

answered Apr 25, 2013 at 6:49

29 votes

Accepted

What security authorities and standards reject $e=3$ in RSA, when, and with what rationale?

answered May 28, 2013 at 2:21

23 votes

Accepted

Is the inverse of a secure PRP also a secure PRP?

answered Sep 19, 2013 at 21:51

20 votes

Time Capsule cryptography?

answered Sep 4, 2011 at 4:45

19 votes

Should I use ECB or CBC encryption mode for my block cipher?

answered Aug 4, 2011 at 6:05

19 votes

Accepted

Stopping timing attacks on AES: Why is it important to prevent the OS from interrupting the AES computation?

answered Nov 30, 2012 at 20:16

19 votes

Accepted

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

answered Sep 15, 2013 at 18:18

18 votes

Are there hash algorithms with variable length output?

answered Aug 15, 2012 at 2:29

17 votes

What is the most practical fully homomorphic cryptosystem?

answered Sep 5, 2011 at 19:47

17 votes

Why is OCB-AES mode not becoming a standard for authenticated encryption?

answered Dec 9, 2012 at 20:30

17 votes

Accepted

How to derive two keys from one password

answered May 5, 2013 at 20:37

17 votes

How to do a literature search

answered May 11, 2013 at 3:27

14 votes

Accepted

Deriving Keys for Symmetric Encryption and Authentication

answered Jan 9, 2013 at 7:32

14 votes

Accepted

How broken is a xor of two LCGs?

answered Sep 24, 2013 at 17:58

14 votes

Accepted

Storing Credentials for a Third Party

answered Sep 1, 2013 at 7:12

13 votes

Accepted

Cryptographically secure keyed rolling hash function

answered May 9, 2014 at 4:59

13 votes

Pen-and-paper one-way function for externally-anonymous survey

answered Jun 2, 2013 at 4:35

13 votes

Finding a keylength in a repeating key XOR cipher

answered Jun 25, 2013 at 16:02

13 votes

Accepted

Are picture files "random enough" to be usable as a one-time pad?

answered Sep 8, 2012 at 0:39

12 votes

Accepted

A timestamping authority (digital notary)

answered Dec 30, 2013 at 1:39

Stack Exchange Network

489 Answers

Should we sign-then-encrypt, or encrypt-then-sign?

Why does nobody use (or break) the Camellia Cipher?

One Encryption, Many Decryption Keys

Explaining weakness of Dual EC DRBG to wider audience?

Now that quantum computers have been out for a while, has RSA been cracked?

What are the differences Between “White-Box Cryptography” and “Code Obfuscation”?

Is AES-256 weaker than 192 and 128 bit versions?

Blum Blum Shub vs. AES-CTR or other CSPRNGs

Why does key generation take an input $1^k$, and how do I represent it in practice?

Purpose of outer key in HMAC

repeating-key xor and hamming distance

What security authorities and standards reject $e=3$ in RSA, when, and with what rationale?

Is the inverse of a secure PRP also a secure PRP?

Time Capsule cryptography?

Should I use ECB or CBC encryption mode for my block cipher?

Stopping timing attacks on AES: Why is it important to prevent the OS from interrupting the AES computation?

What stops the Multiply-With-Carry RNG from being a Cryptographically Secure PRNG?

Are there hash algorithms with variable length output?

What is the most practical fully homomorphic cryptosystem?

Why is OCB-AES mode not becoming a standard for authenticated encryption?

How to derive two keys from one password

How to do a literature search

Deriving Keys for Symmetric Encryption and Authentication

How broken is a xor of two LCGs?

Storing Credentials for a Third Party

Cryptographically secure keyed rolling hash function

Pen-and-paper one-way function for externally-anonymous survey

Finding a keylength in a repeating key XOR cipher

Are picture files "random enough" to be usable as a one-time pad?

A timestamping authority (digital notary)