Skip to main content
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu's user avatar
DannyNiu
  • Member for 8 years
  • Last seen this week
15 votes
2 answers
7k views

How reassuring is 64-bit (in)security?

10 votes
2 answers
995 views

Functional difference between stream cipher, XOF, seed expander, KDF, etc

9 votes
4 answers
2k views

80-bit collision resistance because of 80-bit x87 registers?

9 votes
1 answer
390 views

Sponge with PRF instead of PRP

9 votes
2 answers
430 views

How to implement arbitrary s-box in a side-channel-free way in C?

7 votes
2 answers
642 views

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

6 votes
1 answer
210 views

What's the current status of development of hedged ECDSA and EdDSA?

5 votes
1 answer
913 views

How to build disk encryption system using forward permutations like Gimli?

5 votes
1 answer
304 views

How difficult is inverting a non-square matrix?

5 votes
3 answers
869 views

Anti-spamming hash-based proof-of-work?

5 votes
2 answers
434 views

Recommendation of lightweight RNG for Miller-Rabin primality test

4 votes
1 answer
196 views

Is there any "exception-free" coordinates system for Weierstrass curves?

4 votes
1 answer
115 views

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

4 votes
1 answer
244 views

Can modular exponentiation with a public index be considered a secure permutation?

4 votes
2 answers
307 views

(Impossibility of?) Associative Pseudorandom Permutation

4 votes
3 answers
1k views

What are the benefits of using AEAD algorithms as MAC

4 votes
2 answers
4k views

Any point using CMAC with AES-256?

3 votes
1 answer
661 views

Lattice reduction question regarding the capability of LLL and BKZ

3 votes
0 answers
191 views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

3 votes
2 answers
314 views

Do Korea and Japan have their own national hashing standard?

3 votes
0 answers
113 views

Why is WalnutDSA specified for COSE?

3 votes
2 answers
1k views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

3 votes
1 answer
114 views

Linearization attack on group with automorphism

3 votes
1 answer
61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

3 votes
2 answers
705 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

3 votes
1 answer
974 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

3 votes
1 answer
221 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

3 votes
1 answer
266 views

Kyber-CCA-KEM - Deterministic implicit rejection

2 votes
1 answer
79 views

Is this half-smart way of verifying EdDSA signature secure?

2 votes
1 answer
86 views

API design that maximizes the potential of parallel and tree hashing