Skip to main content
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu
  • Member for 7 years, 11 months
  • Last seen this week
1 vote
1 answer
207 views

Truncating ciphertext as encryption and to decrease bandwidth in code-based PKEs

1 vote
2 answers
234 views

What's the purpose of implicit rejection

1 vote
0 answers
96 views

Is there any harm using a pseudo-prime endorsed by a probablistic test like Miller-Rabin in RSA?

3 votes
1 answer
243 views

Kyber-CCA-KEM - Deterministic implicit rejection

2 votes
1 answer
124 views

Constant-Time Base64 Codec - Necessity and Implementation

1 vote
0 answers
34 views

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

6 votes
1 answer
204 views

What's the current status of development of hedged ECDSA and EdDSA?

1 vote
1 answer
116 views

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

1 vote
0 answers
34 views

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

3 votes
1 answer
206 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

2 votes
1 answer
85 views

API design that maximizes the potential of parallel and tree hashing

2 votes
1 answer
78 views

Is this half-smart way of verifying EdDSA signature secure?

1 vote
1 answer
87 views

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

1 vote
0 answers
70 views

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

3 votes
1 answer
114 views

Linearization attack on group with automorphism

2 votes
1 answer
110 views

How important is constant-time verification of lHash label in RSA-OAEP?

3 votes
2 answers
1k views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

1 vote
1 answer
93 views

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

4 votes
1 answer
192 views

Is there any "exception-free" coordinates system for Weierstrass curves?

2 votes
1 answer
65 views

How to determine whether a point is at infinity in homogenous coordinates?

3 votes
0 answers
111 views

Why is WalnutDSA specified for COSE?

2 votes
2 answers
168 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

3 votes
1 answer
934 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

2 votes
1 answer
240 views

Is it possible to create a Dilithium Prime or Falcon Prime?

2 votes
0 answers
83 views

SSL/TLS Forward secrecy with 2 KEM public keys

1 vote
1 answer
80 views

What are the security implications of RSA decryption of ciphertext >= modulus?

3 votes
2 answers
683 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

1 vote
0 answers
27 views

Does EESS#1 NTRUEncrypt use the PKCS#1 MGF (mask generation function)?

2 votes
0 answers
107 views

What motivated CCM's monstrous design?

2 votes
0 answers
94 views

Are blockciphers with 64-bit blocks still relevant (in any scenario)?