User D.W.

160 votes

4 answers

53k views

Should we trust the NIST-recommended ECC parameters?

asked Sep 9, 2013 at 3:07

52 votes

6 answers

18k views

Who uses Dual_EC_DRBG?

asked Sep 5, 2013 at 20:58

25 votes

3 answers

10k views

What is the ideal cipher model?

asked Sep 13, 2013 at 20:39

24 votes

3 answers

3k views

Are NIST's changes to Keccak/SHA-3 problematic?

asked Sep 30, 2013 at 5:11

23 votes

2 answers

29k views

Why is TLS susceptible to protocol downgrade attacks?

asked Sep 21, 2013 at 6:51

21 votes

3 answers

24k views

Is RSASSA-PKCS1-v1_5 a good signature scheme for new systems?

asked Sep 20, 2012 at 21:56

21 votes

3 answers

7k views

Memory-hard proof-of-work: are they ASIC-resistant?

asked Oct 16, 2015 at 17:41

20 votes

3 answers

7k views

Specification of the Megamos crypto algorithm

asked Jul 26, 2013 at 23:54

16 votes

2 answers

4k views

Multiple-prime RSA; how many primes can I use, for a 2048-bit modulus?

asked Apr 25, 2014 at 19:44

15 votes

2 answers

1k views

How to do a literature search

asked May 10, 2013 at 19:36

14 votes

2 answers

6k views

Simple protocol for 1-out-of-2 oblivious transfer

asked Jun 24, 2013 at 19:19

9 votes

2 answers

2k views

Given a message and signature, find a public key that makes the signature valid

asked Jun 27, 2013 at 22:58

9 votes

1 answer

3k views

A discrete-log-like problem, with matrices: given $A^k x$, find $k$

asked Sep 19, 2012 at 20:55

9 votes

2 answers

3k views

Zero-knowledge proof of a product

asked Apr 25, 2014 at 19:26

8 votes

1 answer

572 views

What functions allow for practical indistinguishability obfuscation?

asked Mar 14, 2014 at 21:12

8 votes

1 answer

3k views

Proof of storage scheme

asked Mar 23, 2014 at 8:15

8 votes

1 answer

4k views

Why are the Davies-Meyer and Miyaguchi-Preneel constructions secure?

asked Apr 17, 2013 at 21:29

8 votes

3 answers

1k views

Discrete log problem, when we have many examples

asked Sep 19, 2012 at 19:35

8 votes

1 answer

558 views

Obfuscating functions that are mostly zero

asked Mar 1, 2019 at 20:24

7 votes

1 answer

635 views

Finding where I am in a linear recurrence relation

asked Sep 19, 2012 at 20:47

7 votes

1 answer

517 views

Non-deniability of data sent over TLS

asked Dec 12, 2015 at 5:47

7 votes

2 answers

323 views

Is TLS secure against VM reset attacks?

asked Jan 27, 2016 at 2:01

6 votes

2 answers

538 views

Length-preserving all-or-nothing transform

asked Jun 17, 2014 at 21:01

6 votes

1 answer

602 views

Private set intersection, using a semi-trusted server

asked Mar 11, 2014 at 7:12

5 votes

2 answers

352 views

Obfuscate an "I'll reveal if you do" function

asked Jun 6, 2014 at 21:47

5 votes

1 answer

4k views

Who uses the RSA BSAFE library? [duplicate]

asked Sep 16, 2013 at 20:58

5 votes

2 answers

2k views

Camellia or AES - which should I use? [closed]

asked Sep 6, 2013 at 22:42

4 votes

1 answer

265 views

Impact of algorithms for factoring using elliptic curves over $\mathbb{Q}$

asked Oct 21, 2012 at 19:51

4 votes

1 answer

719 views

Hash of multiset of values, which lets me compute the hash of the union

asked Nov 1, 2013 at 0:40

4 votes

0 answers

296 views

Obfuscating point-like functions

asked Mar 14, 2014 at 20:58

Stack Exchange Network

37 Questions

Should we trust the NIST-recommended ECC parameters?

Who uses Dual_EC_DRBG?

What is the ideal cipher model?

Are NIST's changes to Keccak/SHA-3 problematic?

Why is TLS susceptible to protocol downgrade attacks?

Is RSASSA-PKCS1-v1_5 a good signature scheme for new systems?

Memory-hard proof-of-work: are they ASIC-resistant?

Specification of the Megamos crypto algorithm

Multiple-prime RSA; how many primes can I use, for a 2048-bit modulus?

How to do a literature search

Simple protocol for 1-out-of-2 oblivious transfer

Given a message and signature, find a public key that makes the signature valid

A discrete-log-like problem, with matrices: given $A^k x$, find $k$

Zero-knowledge proof of a product

What functions allow for practical indistinguishability obfuscation?

Proof of storage scheme

Why are the Davies-Meyer and Miyaguchi-Preneel constructions secure?

Discrete log problem, when we have many examples

Obfuscating functions that are mostly zero

Finding where I am in a linear recurrence relation

Non-deniability of data sent over TLS

Is TLS secure against VM reset attacks?

Length-preserving all-or-nothing transform

Private set intersection, using a semi-trusted server

Obfuscate an "I'll reveal if you do" function

Who uses the RSA BSAFE library? [duplicate]

Camellia or AES - which should I use? [closed]

Impact of algorithms for factoring using elliptic curves over $\mathbb{Q}$

Hash of multiset of values, which lets me compute the hash of the union

Obfuscating point-like functions