User DannyNiu

14 votes

2 answers

5k views

How reassuring is 64-bit (in)security?

asked Oct 28, 2018 at 12:03

10 votes

2 answers

710 views

Functional difference between stream cipher, XOF, seed expander, KDF, etc

asked Feb 8, 2018 at 4:09

9 votes

4 answers

2k views

80-bit collision resistance because of 80-bit x87 registers?

asked Feb 21, 2019 at 8:22

9 votes

2 answers

316 views

How to implement arbitrary s-box in a side-channel-free way in C?

asked Jul 20, 2020 at 12:31

7 votes

1 answer

280 views

Sponge with PRF instead of PRP

asked Dec 6, 2019 at 8:34

7 votes

2 answers

515 views

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

asked Aug 17, 2016 at 7:36

5 votes

1 answer

902 views

How to build disk encryption system using forward permutations like Gimli?

asked Aug 19, 2017 at 12:28

5 votes

1 answer

277 views

How difficult is inverting a non-square matrix?

asked Sep 15, 2017 at 3:12

5 votes

3 answers

801 views

Anti-spamming hash-based proof-of-work?

asked Dec 11, 2017 at 1:57

5 votes

3 answers

788 views

What are the benefits of using AEAD algorithms as MAC

asked Jul 7, 2020 at 5:08

5 votes

2 answers

362 views

Recommendation of lightweight RNG for Miller-Rabin primality test

asked Feb 15, 2021 at 7:27

4 votes

1 answer

216 views

Can modular exponentiation with a public index be considered a secure permutation?

asked Jun 25, 2021 at 8:13

4 votes

1 answer

84 views

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

asked Feb 11, 2021 at 7:08

4 votes

2 answers

3k views

Any point using CMAC with AES-256?

asked Dec 22, 2018 at 14:31

4 votes

2 answers

296 views

(Impossibility of?) Associative Pseudorandom Permutation

asked Sep 16, 2017 at 4:26

3 votes

1 answer

61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

asked Mar 18, 2021 at 6:39

3 votes

1 answer

305 views

Lattice reduction question regarding the capability of LLL and BKZ

asked Oct 4, 2020 at 4:18

3 votes

0 answers

145 views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

asked Dec 1, 2020 at 5:00

3 votes

2 answers

249 views

Do Korea and Japan have their own national hashing standard?

asked Dec 2, 2020 at 6:39

3 votes

2 answers

339 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

asked Aug 17, 2021 at 7:00

3 votes

1 answer

415 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

asked Nov 13, 2021 at 11:48

3 votes

0 answers

68 views

Why is WalnutDSA specified for COSE?

asked Dec 23, 2021 at 2:31

3 votes

1 answer

142 views

Is there any "exception-free" coordinates system for Weierstrass curves?

asked Jan 14, 2022 at 9:13

3 votes

2 answers

681 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

asked Feb 23, 2022 at 7:54

2 votes

1 answer

74 views

How important is constant-time verification of lHash label in RSA-OAEP?

asked Mar 26, 2022 at 3:20

2 votes

1 answer

86 views

Linearization attack on group with automorphism

asked Apr 10, 2022 at 2:31

2 votes

1 answer

54 views

How to determine whether a point is at infinity in homogenous coordinates?

asked Jan 14, 2022 at 9:04

2 votes

2 answers

118 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

asked Nov 18, 2021 at 9:25

2 votes

0 answers

64 views

SSL/TLS Forward secrecy with 2 KEM public keys

asked Sep 9, 2021 at 12:17

2 votes

1 answer

201 views

Is it possible to create a Dilithium Prime or Falcon Prime?

asked Sep 19, 2021 at 22:35

Stack Exchange Network

73 Questions

How reassuring is 64-bit (in)security?

Functional difference between stream cipher, XOF, seed expander, KDF, etc

80-bit collision resistance because of 80-bit x87 registers?

How to implement arbitrary s-box in a side-channel-free way in C?

Sponge with PRF instead of PRP

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

How to build disk encryption system using forward permutations like Gimli?

How difficult is inverting a non-square matrix?

Anti-spamming hash-based proof-of-work?

What are the benefits of using AEAD algorithms as MAC

Recommendation of lightweight RNG for Miller-Rabin primality test

Can modular exponentiation with a public index be considered a secure permutation?

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

Any point using CMAC with AES-256?

(Impossibility of?) Associative Pseudorandom Permutation

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

Lattice reduction question regarding the capability of LLL and BKZ

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

Do Korea and Japan have their own national hashing standard?

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

What is/was SEC#1 ECC public key leading octet 0x01 for?

Why is WalnutDSA specified for COSE?

Is there any "exception-free" coordinates system for Weierstrass curves?

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

How important is constant-time verification of lHash label in RSA-OAEP?

Linearization attack on group with automorphism

How to determine whether a point is at infinity in homogenous coordinates?

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

SSL/TLS Forward secrecy with 2 KEM public keys

Is it possible to create a Dilithium Prime or Falcon Prime?