A. Hersean's user avatar
A. Hersean's user avatar
A. Hersean's user avatar
A. Hersean
  • Member for 5 years, 10 months
  • Last seen this week
  • EU
221 votes
8 answers
104k views

How much would it cost in U.S. dollars to brute-force a 256-bit key in a year?

  • 2,313
139 votes
6 answers
99k views

Should we sign-then-encrypt, or encrypt-then-sign?

  • 5,384
114 votes
4 answers
75k views

How should I calculate the entropy of a password?

  • 1,887
86 votes
10 answers
18k views

In end-to-end encryption, doesn't the server need to be trusted?

  • 979
62 votes
1 answer
28k views

Easy explanation of "IND-" security notions?

  • 44.8k
55 votes
3 answers
25k views

Why Curve25519 for encryption but Ed25519 for signatures?

  • 651
54 votes
2 answers
12k views

Timing attack and good coding practices

  • 541
40 votes
4 answers
7k views

After 20 years of AES, what are the retrospective changes that should have been made?

  • 4,274
35 votes
2 answers
28k views

Is AES-256 a post-quantum secure cipher or not?

  • 367
34 votes
1 answer
14k views

ECDSA, EdDSA and ed25519 relationship / compatibility

34 votes
2 answers
5k views

What are recommended, general strategies to start block-cipher design and/or analysis?

  • 44.8k
30 votes
2 answers
6k views

AES-GCM Disadvantage

28 votes
4 answers
5k views

Why is FIPS 140-2 compliance controversial?

  • 407
26 votes
1 answer
6k views

Is a hash a zero-knowledge proof?

  • 398
26 votes
2 answers
9k views

Elliptic curve ed25519 vs ed448 - Differences

  • 2,129
24 votes
2 answers
6k views

Does the Balloon hashing paper deprecate Argon2?

  • 2,217
24 votes
1 answer
16k views

What are the odds of collisions for a hash function with 256-bit output?

  • 387
18 votes
2 answers
2k views

Why was the winner of the AES competition not a Feistel cipher?

  • 126k
18 votes
3 answers
3k views

UMAC: to what extent is it in use today?

13 votes
1 answer
4k views

Security considerations on "expand 32-byte k"-magic number in the Salsa20 family of stream ciphers?

  • 233
13 votes
2 answers
9k views

How safe are Libsodium Crypto Boxes?

13 votes
3 answers
2k views

How are points on an elliptic curve discretized?

12 votes
1 answer
4k views

Curve25519 over Ed25519 for key exchange? Why?

12 votes
1 answer
5k views

Relation between entropy and min-entropy

11 votes
7 answers
2k views

In search of a pedagogically simple example of asymmetric encryption routine?

11 votes
1 answer
6k views

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

  • 413
10 votes
2 answers
427 views

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

  • 171
9 votes
2 answers
906 views

What do NM-CPA and NM-CCA mean?

7 votes
2 answers
625 views

Why ECDSA has its form?

7 votes
9 answers
921 views

Soft question: What are examples of beautiful proofs in cryptography? [closed]

  • 1,297