User DannyNiu

1 vote

1 answer

195 views

Truncating ciphertext as encryption and to decrease bandwidth in code-based PKEs

asked Nov 23 at 10:42

1 vote

2 answers

172 views

What's the purpose of implicit rejection

asked Oct 18 at 7:22

1 vote

0 answers

94 views

Is there any harm using a pseudo-prime endorsed by a probablistic test like Miller-Rabin in RSA?

asked Oct 17 at 5:57

3 votes

1 answer

176 views

Kyber-CCA-KEM - Deterministic implicit rejection

asked Aug 11 at 9:38

2 votes

1 answer

91 views

Constant-Time Base64 Codec - Necessity and Implementation

asked Jul 27 at 6:39

0 votes

0 answers

34 views

Comparison of distinguishing attack against blockcipher and permutation

asked Jun 5 at 5:38

1 vote

0 answers

34 views

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

asked May 19 at 2:12

6 votes

1 answer

143 views

What's the current status of development of hedged ECDSA and EdDSA?

asked May 16 at 1:05

1 vote

1 answer

100 views

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

asked May 8 at 12:46

1 vote

0 answers

31 views

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

asked Apr 14 at 8:49

3 votes

1 answer

143 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

asked Apr 4 at 4:01

2 votes

1 answer

81 views

API design that maximizes the potential of parallel and tree hashing

asked Aug 4, 2022 at 4:30

2 votes

1 answer

74 views

Is this half-smart way of verifying EdDSA signature secure?

asked May 6, 2022 at 9:12

1 vote

1 answer

69 views

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

asked May 4, 2022 at 2:22

1 vote

0 answers

65 views

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

asked May 3, 2022 at 4:02

3 votes

1 answer

112 views

Linearization attack on group with automorphism

asked Apr 10, 2022 at 2:31

2 votes

1 answer

96 views

How important is constant-time verification of lHash label in RSA-OAEP?

asked Mar 26, 2022 at 3:20

3 votes

2 answers

865 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

asked Feb 23, 2022 at 7:54

1 vote

1 answer

78 views

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

asked Feb 5, 2022 at 7:53

4 votes

1 answer

166 views

Is there any "exception-free" coordinates system for Weierstrass curves?

asked Jan 14, 2022 at 9:13

2 votes

1 answer

62 views

How to determine whether a point is at infinity in homogenous coordinates?

asked Jan 14, 2022 at 9:04

3 votes

0 answers

95 views

Why is WalnutDSA specified for COSE?

asked Dec 23, 2021 at 2:31

2 votes

2 answers

140 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

asked Nov 18, 2021 at 9:25

3 votes

1 answer

697 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

asked Nov 13, 2021 at 11:48

2 votes

1 answer

231 views

Is it possible to create a Dilithium Prime or Falcon Prime?

asked Sep 19, 2021 at 22:35

2 votes

0 answers

76 views

SSL/TLS Forward secrecy with 2 KEM public keys

asked Sep 9, 2021 at 12:17

1 vote

1 answer

71 views

What are the security implications of RSA decryption of ciphertext >= modulus?

asked Sep 4, 2021 at 13:06

3 votes

2 answers

524 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

asked Aug 17, 2021 at 7:00

1 vote

0 answers

24 views

Does EESS#1 NTRUEncrypt use the PKCS#1 MGF (mask generation function)?

asked Jul 30, 2021 at 10:12

2 votes

0 answers

105 views

What motivated CCM's monstrous design?

asked Jul 26, 2021 at 12:07

Stack Exchange Network

84 Questions

Truncating ciphertext as encryption and to decrease bandwidth in code-based PKEs

What's the purpose of implicit rejection

Is there any harm using a pseudo-prime endorsed by a probablistic test like Miller-Rabin in RSA?

Kyber-CCA-KEM - Deterministic implicit rejection

Constant-Time Base64 Codec - Necessity and Implementation

Comparison of distinguishing attack against blockcipher and permutation

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

What's the current status of development of hedged ECDSA and EdDSA?

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

Why in authenticated encryptions do we need separate keys for cipher and MAC?

API design that maximizes the potential of parallel and tree hashing

Is this half-smart way of verifying EdDSA signature secure?

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

Linearization attack on group with automorphism

How important is constant-time verification of lHash label in RSA-OAEP?

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

Is there any "exception-free" coordinates system for Weierstrass curves?

How to determine whether a point is at infinity in homogenous coordinates?

Why is WalnutDSA specified for COSE?

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

What is/was SEC#1 ECC public key leading octet 0x01 for?

Is it possible to create a Dilithium Prime or Falcon Prime?

SSL/TLS Forward secrecy with 2 KEM public keys

What are the security implications of RSA decryption of ciphertext >= modulus?

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

Does EESS#1 NTRUEncrypt use the PKCS#1 MGF (mask generation function)?

What motivated CCM's monstrous design?