User DannyNiu

2 votes

In W-OTS, is it trivial to forge smaller N values?

answered Apr 9, 2019 at 3:37

2 votes

Accepted

Can HKDF be instantiated with HMAC-SWIFFT?

answered Jun 13, 2019 at 7:56

2 votes

Accepted

CRC32 catches errors, but then what's the point of SHA?

answered Oct 6, 2019 at 11:04

2 votes

Accepted

Are HAIFA-construction based hash functions (e.g. Argon2) resistant to length-extension attacks?

answered Oct 15, 2019 at 7:30

2 votes

Adapting LWE Trapdoors for Ring-LWE

answered Oct 30, 2018 at 8:52

2 votes

64 bits password = 13 characters?

answered Nov 8, 2018 at 2:12

2 votes

Does AES-GCM without security tag turn into regular CTR Mode?

answered Mar 28, 2018 at 11:04

2 votes

RSA: revealing the modulus factorization by choosing a bad message

answered Jul 23, 2016 at 10:29

2 votes

How is the $\chi$ step of the Keccak permutation invertible?

answered Jul 25 at 11:11

2 votes

Deriving $y$-coordinate

answered Sep 5 at 2:35

2 votes

All 32 bit primes on 1 640Mb CD-ROM , and then used as immediate lookup of resulting prime factors, is that even possible, in early 1990s?

answered Nov 12 at 6:01

2 votes

Understanding Point Negation in secp256k1 Elliptic Curve

answered Nov 18 at 12:39

2 votes

Size of signature

answered Jun 20, 2022 at 4:59

2 votes

Signature check decrypts ciphertext

answered Jun 24, 2022 at 1:06

2 votes

Is this a scenario where reuse of a One Time Pad is acceptable?

answered Feb 16, 2022 at 3:50

2 votes

Accepted

Why do stream ciphers repeat and how is that a threat?

answered Feb 16, 2022 at 4:54

2 votes

How can we prevent duplicate key attacks on digital signatures

answered Apr 7, 2022 at 1:05

2 votes

Accepted

Ed448 parameters wrong in RFC7748

answered Aug 25, 2022 at 4:29

2 votes

Is there an easy way to make textbook RSA secure enough so it can be used in real life?

answered Nov 5, 2021 at 12:16

2 votes

Is there any good attack model of HMAC?

answered Oct 13, 2021 at 12:00

2 votes

Accepted

Where can I find test vectors for ChaCha20 (trying to understand Wikipedia example)?

answered Aug 15, 2021 at 9:25

2 votes

Accepted

Use name as the initialization vector to encrypt passwords for users

answered Mar 14 at 5:11

2 votes

Would sending audio fragments over a phone call be considered a form of cryptology?

answered May 31 at 1:39

2 votes

modular reduction using solinas prime

answered Jun 25 at 6:25

2 votes

How are public and private keys generated and used for encryption and decryption in a lattice based cryptosystem?

answered Nov 5, 2022 at 13:57

1 vote

Are Digital signatures used enough these days?

answered Nov 16, 2022 at 13:34

1 vote

What schemas are possible for the following encryption algorithms?

answered Dec 6, 2022 at 5:42

1 vote

Attack on AES/DES

answered Dec 15, 2022 at 9:19

1 vote

Entropy for TLS 1.2: how much is needed for linux servers?

answered Jan 25 at 9:50

1 vote

Accepted

Does the ECDSA private or public keys contain data about the signature hash algorithm?

answered Sep 22, 2022 at 11:18

Stack Exchange Network

246 Answers

In W-OTS, is it trivial to forge smaller N values?

Can HKDF be instantiated with HMAC-SWIFFT?

CRC32 catches errors, but then what's the point of SHA?

Are HAIFA-construction based hash functions (e.g. Argon2) resistant to length-extension attacks?

Adapting LWE Trapdoors for Ring-LWE

64 bits password = 13 characters?

Does AES-GCM without security tag turn into regular CTR Mode?

RSA: revealing the modulus factorization by choosing a bad message

How is the $\chi$ step of the Keccak permutation invertible?

Deriving $y$-coordinate

All 32 bit primes on 1 640Mb CD-ROM , and then used as immediate lookup of resulting prime factors, is that even possible, in early 1990s?

Understanding Point Negation in secp256k1 Elliptic Curve

Size of signature

Signature check decrypts ciphertext

Is this a scenario where reuse of a One Time Pad is acceptable?

Why do stream ciphers repeat and how is that a threat?

How can we prevent duplicate key attacks on digital signatures

Ed448 parameters wrong in RFC7748

Is there an easy way to make textbook RSA secure enough so it can be used in real life?

Is there any good attack model of HMAC?

Where can I find test vectors for ChaCha20 (trying to understand Wikipedia example)?

Use name as the initialization vector to encrypt passwords for users

Would sending audio fragments over a phone call be considered a form of cryptology?

modular reduction using solinas prime

How are public and private keys generated and used for encryption and decryption in a lattice based cryptosystem?

Are Digital signatures used enough these days?

What schemas are possible for the following encryption algorithms?

Attack on AES/DES

Entropy for TLS 1.2: how much is needed for linux servers?

Does the ECDSA private or public keys contain data about the signature hash algorithm?