User DannyNiu

0 votes

0 answers

22 views

Comparison of distinguishing attack against blockcipher and permutation

asked Jun 5 at 5:38

1 vote

0 answers

32 views

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

asked May 19 at 2:12

6 votes

1 answer

117 views

What's the current status of development of hedged ECDSA and EdDSA?

asked May 16 at 1:05

1 vote

1 answer

65 views

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

asked May 8 at 12:46

1 vote

0 answers

27 views

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

asked Apr 14 at 8:49

3 votes

1 answer

113 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

asked Apr 4 at 4:01

2 votes

1 answer

77 views

API design that maximizes the potential of parallel and tree hashing

asked Aug 4, 2022 at 4:30

2 votes

1 answer

72 views

Is this half-smart way of verifying EdDSA signature secure?

asked May 6, 2022 at 9:12

1 vote

1 answer

57 views

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

asked May 4, 2022 at 2:22

1 vote

0 answers

59 views

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

asked May 3, 2022 at 4:02

3 votes

1 answer

111 views

Linearization attack on group with automorphism

asked Apr 10, 2022 at 2:31

2 votes

1 answer

77 views

How important is constant-time verification of lHash label in RSA-OAEP?

asked Mar 26, 2022 at 3:20

3 votes

2 answers

730 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

asked Feb 23, 2022 at 7:54

1 vote

1 answer

67 views

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

asked Feb 5, 2022 at 7:53

3 votes

1 answer

148 views

Is there any "exception-free" coordinates system for Weierstrass curves?

asked Jan 14, 2022 at 9:13

2 votes

1 answer

54 views

How to determine whether a point is at infinity in homogenous coordinates?

asked Jan 14, 2022 at 9:04

3 votes

0 answers

75 views

Why is WalnutDSA specified for COSE?

asked Dec 23, 2021 at 2:31

2 votes

2 answers

123 views

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

asked Nov 18, 2021 at 9:25

3 votes

1 answer

497 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

asked Nov 13, 2021 at 11:48

2 votes

1 answer

206 views

Is it possible to create a Dilithium Prime or Falcon Prime?

asked Sep 19, 2021 at 22:35

2 votes

0 answers

67 views

SSL/TLS Forward secrecy with 2 KEM public keys

asked Sep 9, 2021 at 12:17

1 vote

1 answer

60 views

What are the security implications of RSA decryption of ciphertext >= modulus?

asked Sep 4, 2021 at 13:06

3 votes

2 answers

408 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

asked Aug 17, 2021 at 7:00

1 vote

0 answers

23 views

Does EESS#1 NTRUEncrypt use the PKCS#1 MGF (mask generation function)?

asked Jul 30, 2021 at 10:12

2 votes

0 answers

101 views

What motivated CCM's monstrous design?

asked Jul 26, 2021 at 12:07

2 votes

0 answers

90 views

Are blockciphers with 64-bit blocks still relevant (in any scenario)?

asked Jul 25, 2021 at 10:12

4 votes

1 answer

223 views

Can modular exponentiation with a public index be considered a secure permutation?

asked Jun 25, 2021 at 8:13

2 votes

2 answers

313 views

Does SHA-256 have (128-time + 128-space = 256-overall)-bit collision resistance?

asked Jun 23, 2021 at 3:31

1 vote

2 answers

98 views

What are the typical instance parameters of non-commutative cryptographic schemes?

asked Apr 10, 2021 at 11:47

3 votes

1 answer

61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

asked Mar 18, 2021 at 6:39

Stack Exchange Network

79 Questions

Comparison of distinguishing attack against blockcipher and permutation

Does blockcipher decryption always offer equivalent security as blockcipher encryption? [duplicate]

What's the current status of development of hedged ECDSA and EdDSA?

Is it fatal if a blockcipher uses a sbox with a fixed point at 0?

Secure ciphersuite from security-wise sub-optimal unkeyed permutation?

Why in authenticated encryptions do we need separate keys for cipher and MAC?

API design that maximizes the potential of parallel and tree hashing

Is this half-smart way of verifying EdDSA signature secure?

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

Differing result between doubling and addition in extended twisted Edwards coordinates [closed]

Linearization attack on group with automorphism

How important is constant-time verification of lHash label in RSA-OAEP?

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

Applicability of RFC-6090 point doubling formula in homogeneous coordinates

Is there any "exception-free" coordinates system for Weierstrass curves?

How to determine whether a point is at infinity in homogenous coordinates?

Why is WalnutDSA specified for COSE?

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

What is/was SEC#1 ECC public key leading octet 0x01 for?

Is it possible to create a Dilithium Prime or Falcon Prime?

SSL/TLS Forward secrecy with 2 KEM public keys

What are the security implications of RSA decryption of ciphertext >= modulus?

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

Does EESS#1 NTRUEncrypt use the PKCS#1 MGF (mask generation function)?

What motivated CCM's monstrous design?

Are blockciphers with 64-bit blocks still relevant (in any scenario)?

Can modular exponentiation with a public index be considered a secure permutation?

Does SHA-256 have (128-time + 128-space = 256-overall)-bit collision resistance?

What are the typical instance parameters of non-commutative cryptographic schemes?

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?