User A. Hersean

125

votes

6

answers

87k

views

Should we sign-then-encrypt, or encrypt-then-sign?

Jul 5 at 21:56 R1w 1,734

108

votes

4

answers

73k

views

How should I calculate the entropy of a password?

passwords entropy

Jul 10 at 14:17 user81333 1

82

votes

10

answers

17k

views

In end-to-end encryption, doesn't the server need to be trusted?

encryption public-key key-exchange

Dec 24 '17 at 23:05 Squeamish Ossifrage 43.5k

52

votes

2

answers

12k

views

Timing attack and good coding practices

timing-attack

Nov 21 '16 at 16:42 Biv 9,639

48

votes

1

answer

23k

views

Easy explanation of “IND-” security notions?

provable-security chosen-plaintext-attack terminology chosen-ciphertext-attack semantic-security

Sep 12 '19 at 21:13 kelalaka 35.5k

48

votes

3

answers

21k

views

Why Curve25519 for encryption but Ed25519 for signatures?

elliptic-curves ed25519 libsodium

Sep 16 '17 at 22:12 Ella Rose 18.9k

37

votes

4

answers

7k

views

After 20 years of AES, what are the retrospective changes that should have been made?

aes

Jan 20 at 9:20 Giving Up 197

31

votes

2

answers

4k

views

What are recommended, general strategies to start block-cipher design and/or analysis?

cryptanalysis block-cipher algorithm-design

May 1 '19 at 8:02 forest 11.9k

30

votes

2

answers

5k

views

AES-GCM Disadvantage

authenticated-encryption gcm

May 14 '18 at 12:23 Maarten Bodewes♦ 78.4k

27

votes

1

answer

12k

views

ECDSA, EdDSA and ed25519 relationship / compatibility

elliptic-curves dsa ed25519 eddsa

Feb 13 at 6:39 Patriot 2,346

22

votes

1

answer

4k

views

Is a hash a zero-knowledge proof?

zero-knowledge-proofs

Jul 4 '19 at 17:05 Geoffroy Couteau 14.5k

22

votes

1

answer

14k

views

What are the odds of collisions for a hash function with 256-bit output?

hash collision-resistance

Jun 15 '20 at 5:41 fgrieu♦ 111k

18

votes

2

answers

2k

views

Why was the winner of the AES competition not a Feistel cipher?

aes substitution-cipher feistel-network

Sep 29 '13 at 20:41 Community♦ 1

18

votes

3

answers

3k

views

UMAC: to what extent is it in use today?

mac

May 28 '16 at 12:03 wythagoras 207

13

votes

2

answers

4k

views

Elliptic curve ed25519 vs ed448 - Differences

ed25519 ed448

Apr 22 '20 at 13:49 Conrado 5,644

13

votes

2

answers

8k

views

How safe are Libsodium Crypto Boxes?

libsodium

Mar 22 '19 at 14:42 Squeamish Ossifrage 43.5k

13

votes

3

answers

2k

views

How are points on an elliptic curve discretized?

elliptic-curves

Aug 29 at 19:32 fgrieu♦ 111k

11

votes

1

answer

3k

views

Security considerations on “expand 32-byte k”-magic number in the Salsa20 family of stream ciphers?

encryption stream-cipher salsa20 constants

Apr 2 at 22:57 Indolering 321

11

votes

1

answer

3k

views

Relation between entropy and min-entropy

entropy

Jul 31 '19 at 13:11 Russ 273

10

votes

2

answers

363

views

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

factoring quantum-cryptography

May 3 '19 at 9:28 AleksanderRas 6,087

10

votes

1

answer

5k

views

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

hash signature reference-request message-recovery

May 4 at 15:39 fgrieu♦ 111k

9

votes

1

answer

3k

views

Curve25519 over Ed25519 for key exchange? Why?

elliptic-curves key-exchange dsa ed25519

Mar 19 '19 at 16:55 Squeamish Ossifrage 43.5k

8

votes

7

answers

955

views

In search of a pedagogically simple example of asymmetric encryption routine?

public-key algorithm-design pedagogy

Sep 30 '19 at 15:47 postoronnim 129

8

votes

2

answers

630

views

What do NM-CPA and NM-CCA mean?

authenticated-encryption terminology chosen-plaintext-attack chosen-ciphertext-attack malleability

Feb 22 at 16:34 kelalaka 35.5k

7

votes

2

answers

385

views

Why ECDSA has its form?

public-key elliptic-curves signature dsa

Dec 13 '18 at 21:29 Thomas Pornin 82.2k

6

votes

1

answer

704

views

Is forward secrecy overhyped or necessary?

key-generation forward-secrecy

Feb 10 '19 at 17:06 Thomas Pornin 82.2k

6

votes

9

answers

753

views

Soft question: What are examples of beautiful proofs in cryptography? [closed]

history

Jan 3 at 1:46 forest 11.9k

4

votes

1

answer

318

views

Elliptic Curve Cryptography insecure when input does not lie on the curve?

elliptic-curves

Jun 12 '19 at 3:57 Squeamish Ossifrage 43.5k

3

votes

1

answer

266

views

Transition to post-quantum cryptography

public-key post-quantum-cryptography

Feb 25 '20 at 20:18 winstonhong 186

3

votes

2

answers

4k

views

How secure is ChaCha20? [closed]

encryption cryptanalysis stream-cipher chacha

Oct 1 '18 at 20:36 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

31 Bookmarks

Should we sign-then-encrypt, or encrypt-then-sign?

How should I calculate the entropy of a password?

In end-to-end encryption, doesn't the server need to be trusted?

Timing attack and good coding practices

Easy explanation of “IND-” security notions?

Why Curve25519 for encryption but Ed25519 for signatures?

After 20 years of AES, what are the retrospective changes that should have been made?

What are recommended, general strategies to start block-cipher design and/or analysis?

AES-GCM Disadvantage

ECDSA, EdDSA and ed25519 relationship / compatibility

Is a hash a zero-knowledge proof?

What are the odds of collisions for a hash function with 256-bit output?

Why was the winner of the AES competition not a Feistel cipher?

UMAC: to what extent is it in use today?

Elliptic curve ed25519 vs ed448 - Differences

How safe are Libsodium Crypto Boxes?

How are points on an elliptic curve discretized?

Security considerations on “expand 32-byte k”-magic number in the Salsa20 family of stream ciphers?

Relation between entropy and min-entropy

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

Curve25519 over Ed25519 for key exchange? Why?

In search of a pedagogically simple example of asymmetric encryption routine?

What do NM-CPA and NM-CCA mean?

Why ECDSA has its form?

Is forward secrecy overhyped or necessary?

Soft question: What are examples of beautiful proofs in cryptography? [closed]

Elliptic Curve Cryptography insecure when input does not lie on the curve?

Transition to post-quantum cryptography

How secure is ChaCha20? [closed]