Skip to main content
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu
  • Member for 7 years, 11 months
  • Last seen this week
1 vote
1 answer
209 views

Truncating ciphertext as encryption and to decrease bandwidth in code-based PKEs

1 vote
2 answers
239 views

What's the purpose of implicit rejection

1 vote
0 answers
96 views

Is there any harm using a pseudo-prime endorsed by a probablistic test like Miller-Rabin in RSA?

1 vote
1 answer
118 views

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

15 votes
2 answers
7k views

How reassuring is 64-bit (in)security?

3 votes
1 answer
264 views

Kyber-CCA-KEM - Deterministic implicit rejection

2 votes
1 answer
129 views

Constant-Time Base64 Codec - Necessity and Implementation

6 votes
1 answer
209 views

What's the current status of development of hedged ECDSA and EdDSA?

1 vote
0 answers
34 views

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

3 votes
1 answer
114 views

Linearization attack on group with automorphism

1 vote
1 answer
88 views

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

1 vote
0 answers
34 views

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

2 votes
0 answers
94 views

Are blockciphers with 64-bit blocks still relevant (in any scenario)?

3 votes
1 answer
221 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

2 votes
1 answer
241 views

Is it possible to create a Dilithium Prime or Falcon Prime?

9 votes
2 answers
430 views

How to implement arbitrary s-box in a side-channel-free way in C?

2 votes
1 answer
86 views

API design that maximizes the potential of parallel and tree hashing

2 votes
1 answer
79 views

Is this half-smart way of verifying EdDSA signature secure?

1 vote
0 answers
70 views

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

2 votes
1 answer
111 views

How important is constant-time verification of lHash label in RSA-OAEP?

3 votes
2 answers
1k views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

1 vote
1 answer
94 views

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

4 votes
1 answer
194 views

Is there any "exception-free" coordinates system for Weierstrass curves?

2 votes
1 answer
67 views

How to determine whether a point is at infinity in homogenous coordinates?

3 votes
0 answers
112 views

Why is WalnutDSA specified for COSE?

2 votes
2 answers
170 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

3 votes
1 answer
960 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

2 votes
0 answers
84 views

SSL/TLS Forward secrecy with 2 KEM public keys

1 vote
1 answer
81 views

What are the security implications of RSA decryption of ciphertext >= modulus?

3 votes
2 answers
703 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?