User A. Hersean

126

votes

6

answers

89k

views

Should we sign-then-encrypt, or encrypt-then-sign?

May 31 at 17:46 Security Every Day 13

108

votes

4

answers

73k

views

How should I calculate the entropy of a password?

passwords entropy

Jul 10 '20 at 14:17 user81333 1

82

votes

10

answers

17k

views

In end-to-end encryption, doesn't the server need to be trusted?

encryption public-key key-exchange

Dec 24 '17 at 23:05 Squeamish Ossifrage 43.8k

52

votes

2

answers

12k

views

Timing attack and good coding practices

timing-attack

Nov 21 '16 at 16:42 Biv 9,689

49

votes

1

answer

24k

views

Easy explanation of “IND-” security notions?

provable-security chosen-plaintext-attack terminology chosen-ciphertext-attack semantic-security

Sep 12 '19 at 21:13 kelalaka 36.6k

48

votes

3

answers

22k

views

Why Curve25519 for encryption but Ed25519 for signatures?

elliptic-curves ed25519 libsodium

Sep 16 '17 at 22:12 Ella Rose 18.9k

37

votes

4

answers

7k

views

After 20 years of AES, what are the retrospective changes that should have been made?

aes

Jan 20 at 9:20 Giving Up 199

31

votes

2

answers

4k

views

What are recommended, general strategies to start block-cipher design and/or analysis?

cryptanalysis block-cipher algorithm-design

May 1 '19 at 8:02 forest 12.2k

30

votes

2

answers

5k

views

AES-GCM Disadvantage

authenticated-encryption gcm

May 14 '18 at 12:23 Maarten Bodewes♦ 79.8k

28

votes

1

answer

12k

views

ECDSA, EdDSA and ed25519 relationship / compatibility

elliptic-curves dsa ed25519 eddsa

Feb 13 at 6:39 Patriot 2,713

22

votes

1

answer

5k

views

Is a hash a zero-knowledge proof?

zero-knowledge-proofs

Jul 4 '19 at 17:05 Geoffroy Couteau 14.9k

22

votes

1

answer

14k

views

What are the odds of collisions for a hash function with 256-bit output?

hash collision-resistance

Jun 28 at 14:58 fgrieu♦ 114k

18

votes

2

answers

2k

views

Why was the winner of the AES competition not a Feistel cipher?

aes substitution-cipher feistel-network

Sep 29 '13 at 20:41 Community♦ 1

18

votes

3

answers

3k

views

UMAC: to what extent is it in use today?

mac

May 28 '16 at 12:03 wythagoras 207

15

votes

2

answers

5k

views

Elliptic curve ed25519 vs ed448 - Differences

ed25519 ed448

Apr 22 '20 at 13:49 Conrado 5,714

13

votes

2

answers

8k

views

How safe are Libsodium Crypto Boxes?

libsodium

Mar 22 '19 at 14:42 Squeamish Ossifrage 43.8k

13

votes

3

answers

2k

views

How are points on an elliptic curve discretized?

elliptic-curves

Aug 29 '20 at 19:32 fgrieu♦ 114k

11

votes

1

answer

3k

views

Security considerations on “expand 32-byte k”-magic number in the Salsa20 family of stream ciphers?

encryption stream-cipher salsa20 constants

Apr 2 at 22:57 Indolering 321

11

votes

1

answer

3k

views

Relation between entropy and min-entropy

entropy

Jul 31 '19 at 13:11 Russ 273

10

votes

2

answers

366

views

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

factoring quantum-cryptography

May 3 '19 at 9:28 AleksanderRas 6,188

10

votes

1

answer

6k

views

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

hash signature reference-request message-recovery

May 4 at 15:39 fgrieu♦ 114k

9

votes

1

answer

3k

views

Curve25519 over Ed25519 for key exchange? Why?

elliptic-curves key-exchange dsa ed25519

Mar 19 '19 at 16:55 Squeamish Ossifrage 43.8k

9

votes

7

answers

1k

views

In search of a pedagogically simple example of asymmetric encryption routine?

public-key algorithm-design pedagogy

Sep 30 '19 at 15:47 postoronnim 129

8

votes

2

answers

663

views

What do NM-CPA and NM-CCA mean?

authenticated-encryption terminology chosen-plaintext-attack chosen-ciphertext-attack malleability

Feb 22 at 16:34 kelalaka 36.6k

7

votes

2

answers

412

views

Why ECDSA has its form?

public-key elliptic-curves signature dsa

Dec 13 '18 at 21:29 Thomas Pornin 82.5k

6

votes

1

answer

745

views

Is forward secrecy overhyped or necessary?

key-generation forward-secrecy

Feb 10 '19 at 17:06 Thomas Pornin 82.5k

6

votes

9

answers

768

views

Soft question: What are examples of beautiful proofs in cryptography? [closed]

history

Jan 3 at 1:46 forest 12.2k

4

votes

1

answer

343

views

Elliptic Curve Cryptography insecure when input does not lie on the curve?

elliptic-curves

Jun 12 '19 at 3:57 Squeamish Ossifrage 43.8k

3

votes

1

answer

275

views

Transition to post-quantum cryptography

public-key post-quantum-cryptography

Feb 25 '20 at 20:18 winstonhong 186

3

votes

2

answers

4k

views

How secure is ChaCha20? [closed]

encryption cryptanalysis stream-cipher chacha

Oct 1 '18 at 20:36 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

31 Bookmarks

Should we sign-then-encrypt, or encrypt-then-sign?

How should I calculate the entropy of a password?

In end-to-end encryption, doesn't the server need to be trusted?

Timing attack and good coding practices

Easy explanation of “IND-” security notions?

Why Curve25519 for encryption but Ed25519 for signatures?

After 20 years of AES, what are the retrospective changes that should have been made?

What are recommended, general strategies to start block-cipher design and/or analysis?

AES-GCM Disadvantage

ECDSA, EdDSA and ed25519 relationship / compatibility

Is a hash a zero-knowledge proof?

What are the odds of collisions for a hash function with 256-bit output?

Why was the winner of the AES competition not a Feistel cipher?

UMAC: to what extent is it in use today?

Elliptic curve ed25519 vs ed448 - Differences

How safe are Libsodium Crypto Boxes?

How are points on an elliptic curve discretized?

Security considerations on “expand 32-byte k”-magic number in the Salsa20 family of stream ciphers?

Relation between entropy and min-entropy

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

Curve25519 over Ed25519 for key exchange? Why?

In search of a pedagogically simple example of asymmetric encryption routine?

What do NM-CPA and NM-CCA mean?

Why ECDSA has its form?

Is forward secrecy overhyped or necessary?

Soft question: What are examples of beautiful proofs in cryptography? [closed]

Elliptic Curve Cryptography insecure when input does not lie on the curve?

Transition to post-quantum cryptography

How secure is ChaCha20? [closed]