User DannyNiu

14 votes

2 answers

5k views

How reassuring is 64-bit (in)security?

asked Oct 28, 2018 at 12:03

10 votes

2 answers

763 views

Functional difference between stream cipher, XOF, seed expander, KDF, etc

asked Feb 8, 2018 at 4:09

9 votes

4 answers

2k views

80-bit collision resistance because of 80-bit x87 registers?

asked Feb 21, 2019 at 8:22

9 votes

2 answers

339 views

How to implement arbitrary s-box in a side-channel-free way in C?

asked Jul 20, 2020 at 12:31

7 votes

1 answer

288 views

Sponge with PRF instead of PRP

asked Dec 6, 2019 at 8:34

7 votes

2 answers

531 views

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

asked Aug 17, 2016 at 7:36

6 votes

1 answer

116 views

What's the current status of development of hedged ECDSA and EdDSA?

asked May 16 at 1:05

5 votes

1 answer

905 views

How to build disk encryption system using forward permutations like Gimli?

asked Aug 19, 2017 at 12:28

5 votes

1 answer

279 views

How difficult is inverting a non-square matrix?

asked Sep 15, 2017 at 3:12

5 votes

3 answers

810 views

Anti-spamming hash-based proof-of-work?

asked Dec 11, 2017 at 1:57

5 votes

3 answers

845 views

What are the benefits of using AEAD algorithms as MAC

asked Jul 7, 2020 at 5:08

5 votes

2 answers

367 views

Recommendation of lightweight RNG for Miller-Rabin primality test

asked Feb 15, 2021 at 7:27

4 votes

1 answer

91 views

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

asked Feb 11, 2021 at 7:08

4 votes

1 answer

222 views

Can modular exponentiation with a public index be considered a secure permutation?

asked Jun 25, 2021 at 8:13

4 votes

2 answers

3k views

Any point using CMAC with AES-256?

asked Dec 22, 2018 at 14:31

4 votes

2 answers

300 views

(Impossibility of?) Associative Pseudorandom Permutation

asked Sep 16, 2017 at 4:26

3 votes

1 answer

347 views

Lattice reduction question regarding the capability of LLL and BKZ

asked Oct 4, 2020 at 4:18

3 votes

0 answers

153 views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

asked Dec 1, 2020 at 5:00

3 votes

2 answers

258 views

Do Korea and Japan have their own national hashing standard?

asked Dec 2, 2020 at 6:39

3 votes

1 answer

61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

asked Mar 18, 2021 at 6:39

3 votes

2 answers

405 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

asked Aug 17, 2021 at 7:00

3 votes

1 answer

496 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

asked Nov 13, 2021 at 11:48

3 votes

0 answers

75 views

Why is WalnutDSA specified for COSE?

asked Dec 23, 2021 at 2:31

3 votes

1 answer

147 views

Is there any "exception-free" coordinates system for Weierstrass curves?

asked Jan 14, 2022 at 9:13

3 votes

2 answers

728 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

asked Feb 23, 2022 at 7:54

3 votes

1 answer

110 views

Linearization attack on group with automorphism

asked Apr 10, 2022 at 2:31

3 votes

1 answer

113 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

asked Apr 4 at 4:01

2 votes

1 answer

72 views

Is this half-smart way of verifying EdDSA signature secure?

asked May 6, 2022 at 9:12

2 votes

1 answer

77 views

API design that maximizes the potential of parallel and tree hashing

asked Aug 4, 2022 at 4:30

2 votes

2 answers

313 views

Does SHA-256 have (128-time + 128-space = 256-overall)-bit collision resistance?

asked Jun 23, 2021 at 3:31

Stack Exchange Network

79 Questions

How reassuring is 64-bit (in)security?

Functional difference between stream cipher, XOF, seed expander, KDF, etc

80-bit collision resistance because of 80-bit x87 registers?

How to implement arbitrary s-box in a side-channel-free way in C?

Sponge with PRF instead of PRP

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

What's the current status of development of hedged ECDSA and EdDSA?

How to build disk encryption system using forward permutations like Gimli?

How difficult is inverting a non-square matrix?

Anti-spamming hash-based proof-of-work?

What are the benefits of using AEAD algorithms as MAC

Recommendation of lightweight RNG for Miller-Rabin primality test

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

Can modular exponentiation with a public index be considered a secure permutation?

Any point using CMAC with AES-256?

(Impossibility of?) Associative Pseudorandom Permutation

Lattice reduction question regarding the capability of LLL and BKZ

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

Do Korea and Japan have their own national hashing standard?

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

What is/was SEC#1 ECC public key leading octet 0x01 for?

Why is WalnutDSA specified for COSE?

Is there any "exception-free" coordinates system for Weierstrass curves?

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

Linearization attack on group with automorphism

Why in authenticated encryptions do we need separate keys for cipher and MAC?

Is this half-smart way of verifying EdDSA signature secure?

API design that maximizes the potential of parallel and tree hashing

Does SHA-256 have (128-time + 128-space = 256-overall)-bit collision resistance?