DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu
  • Member for 6 years, 8 months
  • Last seen this week
14 votes
2 answers
5k views

How reassuring is 64-bit (in)security?

10 votes
2 answers
710 views

Functional difference between stream cipher, XOF, seed expander, KDF, etc

9 votes
4 answers
2k views

80-bit collision resistance because of 80-bit x87 registers?

9 votes
2 answers
316 views

How to implement arbitrary s-box in a side-channel-free way in C?

7 votes
1 answer
280 views

Sponge with PRF instead of PRP

7 votes
2 answers
515 views

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

5 votes
1 answer
902 views

How to build disk encryption system using forward permutations like Gimli?

5 votes
1 answer
277 views

How difficult is inverting a non-square matrix?

5 votes
3 answers
801 views

Anti-spamming hash-based proof-of-work?

5 votes
3 answers
788 views

What are the benefits of using AEAD algorithms as MAC

5 votes
2 answers
362 views

Recommendation of lightweight RNG for Miller-Rabin primality test

4 votes
1 answer
216 views

Can modular exponentiation with a public index be considered a secure permutation?

4 votes
1 answer
84 views

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

4 votes
2 answers
3k views

Any point using CMAC with AES-256?

4 votes
2 answers
296 views

(Impossibility of?) Associative Pseudorandom Permutation

3 votes
1 answer
61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

3 votes
1 answer
305 views

Lattice reduction question regarding the capability of LLL and BKZ

3 votes
0 answers
145 views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

3 votes
2 answers
249 views

Do Korea and Japan have their own national hashing standard?

3 votes
2 answers
339 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

3 votes
1 answer
415 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

3 votes
0 answers
68 views

Why is WalnutDSA specified for COSE?

3 votes
1 answer
142 views

Is there any "exception-free" coordinates system for Weierstrass curves?

3 votes
2 answers
681 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

2 votes
1 answer
74 views

How important is constant-time verification of lHash label in RSA-OAEP?

2 votes
1 answer
86 views

Linearization attack on group with automorphism

2 votes
1 answer
54 views

How to determine whether a point is at infinity in homogenous coordinates?

2 votes
2 answers
118 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

2 votes
0 answers
64 views

SSL/TLS Forward secrecy with 2 KEM public keys

2 votes
1 answer
201 views

Is it possible to create a Dilithium Prime or Falcon Prime?