User DannyNiu

15 votes

2 answers

6k views

How reassuring is 64-bit (in)security?

asked Oct 28, 2018 at 12:03

10 votes

2 answers

882 views

Functional difference between stream cipher, XOF, seed expander, KDF, etc

asked Feb 8, 2018 at 4:09

9 votes

4 answers

2k views

80-bit collision resistance because of 80-bit x87 registers?

asked Feb 21, 2019 at 8:22

9 votes

2 answers

379 views

How to implement arbitrary s-box in a side-channel-free way in C?

asked Jul 20, 2020 at 12:31

8 votes

1 answer

338 views

Sponge with PRF instead of PRP

asked Dec 6, 2019 at 8:34

7 votes

2 answers

571 views

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

asked Aug 17, 2016 at 7:36

6 votes

1 answer

143 views

What's the current status of development of hedged ECDSA and EdDSA?

asked May 16 at 1:05

5 votes

1 answer

910 views

How to build disk encryption system using forward permutations like Gimli?

asked Aug 19, 2017 at 12:28

5 votes

1 answer

291 views

How difficult is inverting a non-square matrix?

asked Sep 15, 2017 at 3:12

5 votes

3 answers

838 views

Anti-spamming hash-based proof-of-work?

asked Dec 11, 2017 at 1:57

5 votes

3 answers

985 views

What are the benefits of using AEAD algorithms as MAC

asked Jul 7, 2020 at 5:08

5 votes

2 answers

380 views

Recommendation of lightweight RNG for Miller-Rabin primality test

asked Feb 15, 2021 at 7:27

4 votes

1 answer

166 views

Is there any "exception-free" coordinates system for Weierstrass curves?

asked Jan 14, 2022 at 9:13

4 votes

1 answer

106 views

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

asked Feb 11, 2021 at 7:08

4 votes

1 answer

237 views

Can modular exponentiation with a public index be considered a secure permutation?

asked Jun 25, 2021 at 8:13

4 votes

2 answers

3k views

Any point using CMAC with AES-256?

asked Dec 22, 2018 at 14:31

4 votes

2 answers

302 views

(Impossibility of?) Associative Pseudorandom Permutation

asked Sep 16, 2017 at 4:26

3 votes

1 answer

517 views

Lattice reduction question regarding the capability of LLL and BKZ

asked Oct 4, 2020 at 4:18

3 votes

0 answers

173 views

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

asked Dec 1, 2020 at 5:00

3 votes

2 answers

294 views

Do Korea and Japan have their own national hashing standard?

asked Dec 2, 2020 at 6:39

3 votes

0 answers

95 views

Why is WalnutDSA specified for COSE?

asked Dec 23, 2021 at 2:31

3 votes

2 answers

857 views

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

asked Feb 23, 2022 at 7:54

3 votes

1 answer

112 views

Linearization attack on group with automorphism

asked Apr 10, 2022 at 2:31

3 votes

1 answer

61 views

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

asked Mar 18, 2021 at 6:39

3 votes

2 answers

520 views

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

asked Aug 17, 2021 at 7:00

3 votes

1 answer

691 views

What is/was SEC#1 ECC public key leading octet 0x01 for?

asked Nov 13, 2021 at 11:48

3 votes

1 answer

141 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

asked Apr 4 at 4:01

3 votes

1 answer

175 views

Kyber-CCA-KEM - Deterministic implicit rejection

asked Aug 11 at 9:38

2 votes

1 answer

74 views

Is this half-smart way of verifying EdDSA signature secure?

asked May 6, 2022 at 9:12

2 votes

1 answer

81 views

API design that maximizes the potential of parallel and tree hashing

asked Aug 4, 2022 at 4:30

Stack Exchange Network

84 Questions

How reassuring is 64-bit (in)security?

Functional difference between stream cipher, XOF, seed expander, KDF, etc

80-bit collision resistance because of 80-bit x87 registers?

How to implement arbitrary s-box in a side-channel-free way in C?

Sponge with PRF instead of PRP

Will a SHAKE128 stream cipher be vulnerable to related key attacks?

What's the current status of development of hedged ECDSA and EdDSA?

How to build disk encryption system using forward permutations like Gimli?

How difficult is inverting a non-square matrix?

Anti-spamming hash-based proof-of-work?

What are the benefits of using AEAD algorithms as MAC

Recommendation of lightweight RNG for Miller-Rabin primality test

Is there any "exception-free" coordinates system for Weierstrass curves?

Did the formalization of PKCS#1 RSA key formats come before or after X.509?

Can modular exponentiation with a public index be considered a secure permutation?

Any point using CMAC with AES-256?

(Impossibility of?) Associative Pseudorandom Permutation

Lattice reduction question regarding the capability of LLL and BKZ

Does the security proof of HMAC somehow change if it's instantiated with sponge-based hash functions with small rate and large capacity?

Do Korea and Japan have their own national hashing standard?

Why is WalnutDSA specified for COSE?

Can I get away with generating 512-bit k (and d) for ECDSA based on P-521?

Linearization attack on group with automorphism

Is there any advantage using this kind of ROM-based randomized hashing in digital signatures?

How are the instantiations of RSAES-OAEP and SHA*WithRSAEncryption different in practice?

What is/was SEC#1 ECC public key leading octet 0x01 for?

Why in authenticated encryptions do we need separate keys for cipher and MAC?

Kyber-CCA-KEM - Deterministic implicit rejection

Is this half-smart way of verifying EdDSA signature secure?

API design that maximizes the potential of parallel and tree hashing