DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu
  • Member for 6 years, 10 months
  • Last seen this week
0 votes
0 answers
22 views

Comparison of distinguishing attack against blockcipher and permutation

1 vote
0 answers
32 views

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

6 votes
1 answer
117 views

What's the current status of development of hedged ECDSA and EdDSA?

1 vote
1 answer
65 views

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

1 vote
0 answers
27 views

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

3 votes
1 answer
113 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

2 votes
1 answer
77 views

API design that maximizes the potential of parallel and tree hashing

2 votes
1 answer
72 views

Is this half-smart way of verifying EdDSA signature secure?

1 vote
1 answer
57 views

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

1 vote
0 answers
59 views

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

3 votes
1 answer
111 views

Linearization attack on group with automorphism

2 votes
1 answer
77 views

How important is constant-time verification of lHash label in RSA-OAEP?

3 votes
2 answers
730 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

1 vote
1 answer
67 views

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

3 votes
1 answer
148 views

Is there any "exception-free" coordinates system for Weierstrass curves?

2 votes
1 answer
54 views

How to determine whether a point is at infinity in homogenous coordinates?

3 votes
0 answers
75 views

Why is WalnutDSA specified for COSE?

2 votes
2 answers
123 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

3 votes
1 answer
497 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

2 votes
1 answer
206 views

Is it possible to create a Dilithium Prime or Falcon Prime?

2 votes
0 answers
67 views

SSL/TLS Forward secrecy with 2 KEM public keys

1 vote
1 answer
60 views

What are the security implications of RSA decryption of ciphertext >= modulus?

3 votes
2 answers
408 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

1 vote
0 answers
23 views

Does EESS#1 NTRUEncrypt use the PKCS#1 MGF (mask generation function)?

2 votes
0 answers
101 views

What motivated CCM's monstrous design?

2 votes
0 answers
90 views

Are blockciphers with 64-bit blocks still relevant (in any scenario)?

4 votes
1 answer
223 views

Can modular exponentiation with a public index be considered a secure permutation?

2 votes
2 answers
313 views

Does SHA-256 have (128-time + 128-space = 256-overall)-bit collision resistance?

1 vote
2 answers
98 views

What are the typical instance parameters of non-commutative cryptographic schemes?

3 votes
1 answer
61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?