As of May 31, 2023, we have updated our Code of Conduct.
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu
  • Member for 6 years, 10 months
  • Last seen this week
14 votes
2 answers
5k views

How reassuring is 64-bit (in)security?

10 votes
2 answers
763 views

Functional difference between stream cipher, XOF, seed expander, KDF, etc

9 votes
4 answers
2k views

80-bit collision resistance because of 80-bit x87 registers?

9 votes
2 answers
339 views

How to implement arbitrary s-box in a side-channel-free way in C?

7 votes
1 answer
288 views

Sponge with PRF instead of PRP

7 votes
2 answers
531 views

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

6 votes
1 answer
116 views

What's the current status of development of hedged ECDSA and EdDSA?

5 votes
1 answer
905 views

How to build disk encryption system using forward permutations like Gimli?

5 votes
1 answer
279 views

How difficult is inverting a non-square matrix?

5 votes
3 answers
810 views

Anti-spamming hash-based proof-of-work?

5 votes
3 answers
845 views

What are the benefits of using AEAD algorithms as MAC

5 votes
2 answers
367 views

Recommendation of lightweight RNG for Miller-Rabin primality test

4 votes
1 answer
91 views

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

4 votes
1 answer
222 views

Can modular exponentiation with a public index be considered a secure permutation?

4 votes
2 answers
3k views

Any point using CMAC with AES-256?

4 votes
2 answers
300 views

(Impossibility of?) Associative Pseudorandom Permutation

3 votes
1 answer
347 views

Lattice reduction question regarding the capability of LLL and BKZ

3 votes
0 answers
153 views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

3 votes
2 answers
258 views

Do Korea and Japan have their own national hashing standard?

3 votes
1 answer
61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

3 votes
2 answers
405 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

3 votes
1 answer
496 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

3 votes
0 answers
75 views

Why is WalnutDSA specified for COSE?

3 votes
1 answer
147 views

Is there any "exception-free" coordinates system for Weierstrass curves?

3 votes
2 answers
728 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

3 votes
1 answer
110 views

Linearization attack on group with automorphism

3 votes
1 answer
113 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

2 votes
1 answer
72 views

Is this half-smart way of verifying EdDSA signature secure?

2 votes
1 answer
77 views

API design that maximizes the potential of parallel and tree hashing

2 votes
2 answers
313 views

Does SHA-256 have (128-time + 128-space = 256-overall)-bit collision resistance?