User A. Hersean

214

votes

8

answers

100k

views

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

brute-force-attack

Mar 13 '20 at 6:02 bono_silhouette 11

130

votes

6

answers

92k

views

Should we sign-then-encrypt, or encrypt-then-sign?

May 31 at 17:46 Security Every Day 13

110

votes

4

answers

74k

views

How should I calculate the entropy of a password?

passwords entropy

Jul 10 '20 at 14:17 user81333 1

84

votes

10

answers

17k

views

In end-to-end encryption, doesn't the server need to be trusted?

encryption public-key key-exchange

Dec 24 '17 at 23:05 Squeamish Ossifrage 44.6k

53

votes

2

answers

12k

views

Timing attack and good coding practices

timing-attack

Nov 21 '16 at 16:42 Biv 9,719

53

votes

1

answer

25k

views

Easy explanation of "IND-" security notions?

provable-security chosen-plaintext-attack terminology chosen-ciphertext-attack semantic-security

Sep 12 '19 at 21:13 kelalaka 38.2k

50

votes

3

answers

23k

views

Why Curve25519 for encryption but Ed25519 for signatures?

elliptic-curves ed25519 libsodium

Sep 16 '17 at 22:12 Ella Rose 19.1k

37

votes

4

answers

7k

views

After 20 years of AES, what are the retrospective changes that should have been made?

aes

Jan 20 at 9:20 CommunityBot 1

34

votes

2

answers

5k

views

What are recommended, general strategies to start block-cipher design and/or analysis?

cryptanalysis block-cipher algorithm-design

May 1 '19 at 8:02 forest 12.4k

30

votes

2

answers

6k

views

AES-GCM Disadvantage

authenticated-encryption gcm

May 14 '18 at 12:23 Maarten Bodewes♦ 81.8k

29

votes

1

answer

13k

views

ECDSA, EdDSA and ed25519 relationship / compatibility

elliptic-curves dsa ed25519 eddsa

Feb 13 at 6:39 CommunityBot 1

27

votes

4

answers

4k

views

Why is FIPS 140-2 compliance controversial?

fips-140

Nov 24 at 10:38 fgrieu♦ 119k

23

votes

1

answer

15k

views

What are the odds of collisions for a hash function with 256-bit output?

hash collision-resistance

Jun 28 at 14:58 fgrieu♦ 119k

22

votes

1

answer

5k

views

Is a hash a zero-knowledge proof?

zero-knowledge-proofs

Jul 4 '19 at 17:05 Geoffroy Couteau 16.1k

18

votes

3

answers

3k

views

UMAC: to what extent is it in use today?

mac

May 28 '16 at 12:03 CommunityBot 1

18

votes

2

answers

2k

views

Why was the winner of the AES competition not a Feistel cipher?

aes substitution-cipher feistel-network

Sep 29 '13 at 20:41 CommunityBot 1

17

votes

2

answers

6k

views

Elliptic curve ed25519 vs ed448 - Differences

ed25519 ed448

Apr 22 '20 at 13:49 CommunityBot 1

13

votes

2

answers

8k

views

How safe are Libsodium Crypto Boxes?

libsodium

Mar 22 '19 at 14:42 Squeamish Ossifrage 44.6k

13

votes

3

answers

2k

views

How are points on an elliptic curve discretized?

elliptic-curves

Aug 29 '20 at 19:32 fgrieu♦ 119k

12

votes

1

answer

4k

views

Security considerations on "expand 32-byte k"-magic number in the Salsa20 family of stream ciphers?

encryption stream-cipher salsa20 constants

Sep 22 at 16:36 CodesInChaos 23.7k

11

votes

1

answer

4k

views

Relation between entropy and min-entropy

entropy

Jul 31 '19 at 13:11 Russ 273

10

votes

2

answers

389

views

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

factoring quantum-cryptography

May 3 '19 at 9:28 AleksanderCH 6,247

10

votes

1

answer

3k

views

Curve25519 over Ed25519 for key exchange? Why?

elliptic-curves key-exchange dsa ed25519

Mar 19 '19 at 16:55 Squeamish Ossifrage 44.6k

10

votes

1

answer

6k

views

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

hash signature reference-request message-recovery

May 4 at 15:39 fgrieu♦ 119k

9

votes

7

answers

1k

views

In search of a pedagogically simple example of asymmetric encryption routine?

public-key algorithm-design pedagogy

Sep 30 '19 at 15:47 CommunityBot 1

9

votes

2

answers

736

views

What do NM-CPA and NM-CCA mean?

authenticated-encryption terminology chosen-plaintext-attack chosen-ciphertext-attack malleability

Feb 22 at 16:34 kelalaka 38.2k

7

votes

2

answers

479

views

Why ECDSA has its form?

public-key elliptic-curves signature dsa

Dec 13 '18 at 21:29 Thomas Pornin 83.3k

6

votes

1

answer

822

views

Is forward secrecy overhyped or necessary?

key-generation forward-secrecy

Feb 10 '19 at 17:06 CommunityBot 1

6

votes

9

answers

791

views

Soft question: What are examples of beautiful proofs in cryptography? [closed]

history

Jan 3 '21 at 1:46 forest 12.4k

6

votes

2

answers

2k

views

GMAC vs HMAC in message forgery and bandwidth

hash tls hmac forgery ghash

Oct 9 '19 at 19:59 CommunityBot 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

34 Bookmarks

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

Should we sign-then-encrypt, or encrypt-then-sign?

How should I calculate the entropy of a password?

In end-to-end encryption, doesn't the server need to be trusted?

Timing attack and good coding practices

Easy explanation of "IND-" security notions?

Why Curve25519 for encryption but Ed25519 for signatures?

After 20 years of AES, what are the retrospective changes that should have been made?

What are recommended, general strategies to start block-cipher design and/or analysis?

AES-GCM Disadvantage

ECDSA, EdDSA and ed25519 relationship / compatibility

Why is FIPS 140-2 compliance controversial?

What are the odds of collisions for a hash function with 256-bit output?

Is a hash a zero-knowledge proof?

UMAC: to what extent is it in use today?

Why was the winner of the AES competition not a Feistel cipher?

Elliptic curve ed25519 vs ed448 - Differences

How safe are Libsodium Crypto Boxes?

How are points on an elliptic curve discretized?

Security considerations on "expand 32-byte k"-magic number in the Salsa20 family of stream ciphers?

Relation between entropy and min-entropy

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

Curve25519 over Ed25519 for key exchange? Why?

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

In search of a pedagogically simple example of asymmetric encryption routine?

What do NM-CPA and NM-CCA mean?

Why ECDSA has its form?

Is forward secrecy overhyped or necessary?

Soft question: What are examples of beautiful proofs in cryptography? [closed]

GMAC vs HMAC in message forgery and bandwidth