DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu
  • Member for 7 years, 4 months
  • Last seen this week
1 vote
1 answer
197 views

Truncating ciphertext as encryption and to decrease bandwidth in code-based PKEs

1 vote
2 answers
172 views

What's the purpose of implicit rejection

1 vote
0 answers
94 views

Is there any harm using a pseudo-prime endorsed by a probablistic test like Miller-Rabin in RSA?

1 vote
1 answer
100 views

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

15 votes
2 answers
6k views

How reassuring is 64-bit (in)security?

3 votes
1 answer
176 views

Kyber-CCA-KEM - Deterministic implicit rejection

2 votes
1 answer
91 views

Constant-Time Base64 Codec - Necessity and Implementation

0 votes
0 answers
34 views

Comparison of distinguishing attack against blockcipher and permutation

6 votes
1 answer
143 views

What's the current status of development of hedged ECDSA and EdDSA?

1 vote
0 answers
34 views

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

3 votes
1 answer
112 views

Linearization attack on group with automorphism

1 vote
1 answer
69 views

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

1 vote
0 answers
31 views

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

2 votes
0 answers
93 views

Are blockciphers with 64-bit blocks still relevant (in any scenario)?

3 votes
1 answer
143 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

2 votes
1 answer
231 views

Is it possible to create a Dilithium Prime or Falcon Prime?

9 votes
2 answers
382 views

How to implement arbitrary s-box in a side-channel-free way in C?

2 votes
1 answer
81 views

API design that maximizes the potential of parallel and tree hashing

2 votes
1 answer
74 views

Is this half-smart way of verifying EdDSA signature secure?

1 vote
0 answers
65 views

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

2 votes
1 answer
96 views

How important is constant-time verification of lHash label in RSA-OAEP?

3 votes
2 answers
865 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

1 vote
1 answer
78 views

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

4 votes
1 answer
166 views

Is there any "exception-free" coordinates system for Weierstrass curves?

2 votes
1 answer
62 views

How to determine whether a point is at infinity in homogenous coordinates?

3 votes
0 answers
95 views

Why is WalnutDSA specified for COSE?

2 votes
2 answers
140 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

3 votes
1 answer
698 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

2 votes
0 answers
76 views

SSL/TLS Forward secrecy with 2 KEM public keys

1 vote
1 answer
72 views

What are the security implications of RSA decryption of ciphertext >= modulus?