User A. Hersean

119

votes

6

answers

80k

views

Should we sign-then-encrypt, or encrypt-then-sign?

Jul 5 at 21:56 R1w 1,502

104

votes

4

answers

69k

views

How should I calculate the entropy of a password?

passwords entropy

Jul 10 at 14:17 user81333 1

81

votes

10

answers

16k

views

In end-to-end encryption, doesn't the server need to be trusted?

encryption public-key key-exchange

Dec 24 '17 at 23:05 Squeamish Ossifrage 41.7k

53

votes

2

answers

11k

views

Timing attack and good coding practices

timing-attack

Nov 21 '16 at 16:42 Biv 9,460

46

votes

1

answer

20k

views

Easy explanation of “IND-” security notions?

provable-security chosen-plaintext-attack terminology chosen-ciphertext-attack semantic-security

Sep 12 '19 at 21:13 kelalaka 23.5k

45

votes

3

answers

19k

views

Why Curve25519 for encryption but Ed25519 for signatures?

elliptic-curves ed25519 libsodium

Sep 16 '17 at 22:12 Ella Rose 18.6k

29

votes

2

answers

4k

views

What are recommended, general strategies to start block-cipher design and/or analysis?

cryptanalysis block-cipher algorithm-design

May 1 '19 at 8:02 forest 10.6k

27

votes

2

answers

5k

views

AES-GCM Disadvantage

authenticated-encryption gcm

May 14 '18 at 12:23 Maarten Bodewes♦ 74.2k

25

votes

1

answer

11k

views

ECDSA, EdDSA and ed25519 relationship / compatibility

elliptic-curves dsa ed25519

Oct 9 at 22:44 Kostas Chalkias 135

22

votes

1

answer

13k

views

What are the odds of collisions for a hash function with 256-bit output?

hash collision-resistance

Jun 15 at 5:41 fgrieu♦ 106k

21

votes

1

answer

4k

views

Is a hash a zero-knowledge proof?

zero-knowledge-proofs

Jul 4 '19 at 17:05 Geoffroy Couteau 13.2k

18

votes

3

answers

3k

views

UMAC: to what extent is it in use today?

mac

May 28 '16 at 12:03 wythagoras 207

17

votes

2

answers

2k

views

Why was the winner of the AES competition not a Feistel cipher?

aes substitution-cipher feistel-network

Sep 29 '13 at 20:41 Community♦ 1

13

votes

3

answers

2k

views

How are points on an elliptic curve discretized?

elliptic-curves

Aug 29 at 19:32 fgrieu♦ 106k

12

votes

2

answers

7k

views

How safe are Libsodium Crypto Boxes?

libsodium

Mar 22 '19 at 14:42 Squeamish Ossifrage 41.7k

11

votes

1

answer

2k

views

Relation between entropy and min-entropy

entropy

Jul 31 '19 at 13:11 Russ 273

10

votes

2

answers

292

views

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

factoring quantum-cryptography

May 3 '19 at 9:28 AleksanderRas 5,855

10

votes

1

answer

3k

views

Security considerations on “expand 32-byte k”-magic number in the Salsa20 family of stream ciphers?

encryption stream-cipher salsa20 constants

Sep 14 '17 at 5:06 otus 30.2k

8

votes

7

answers

693

views

In search of a pedagogically simple example of asymmetric encryption routine?

public-key algorithm-design pedagogy

Sep 30 '19 at 15:47 postoronnim 129

8

votes

1

answer

5k

views

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

hash signature reference-request message-recovery

Oct 16 '19 at 8:44 fgrieu♦ 106k

8

votes

2

answers

3k

views

Elliptic curve ed25519 vs ed448 - Differences

ed25519 ed448

Apr 22 at 13:49 Conrado 5,289

7

votes

2

answers

304

views

Why ECDSA has its form?

public-key elliptic-curves signature dsa

Dec 13 '18 at 21:29 Thomas Pornin 80.6k

7

votes

1

answer

2k

views

Curve25519 over Ed25519 for key exchange? Why?

elliptic-curves key-exchange dsa ed25519

Mar 19 '19 at 16:55 Squeamish Ossifrage 41.7k

6

votes

1

answer

538

views

Is forward secrecy overhyped or necessary?

key-generation forward-secrecy

Feb 10 '19 at 17:06 Thomas Pornin 80.6k

6

votes

2

answers

450

views

What do NM-CPA, and NM-CCA mean?

authenticated-encryption terminology

Mar 20 '19 at 2:05 Squeamish Ossifrage 41.7k

5

votes

10

answers

685

views

Soft question: What are examples of beautiful proofs in cryptography? [closed]

history

Jun 17 '19 at 21:04 Marc Ilunga 772

4

votes

1

answer

238

views

Elliptic Curve Cryptography insecure when input does not lie on the curve?

elliptic-curves

Jun 12 '19 at 3:57 Squeamish Ossifrage 41.7k

3

votes

2

answers

3k

views

How secure is ChaCha20? [closed]

encryption cryptanalysis stream-cipher chacha

Oct 1 '18 at 20:36 Community♦ 1

3

votes

2

answers

1k

views

How are these AES MixColumn multiplication tables calculated?

aes finite-field

Jun 12 '19 at 16:58 b degnan 3,925

2

votes

1

answer

229

views

Transition to post-quantum cryptography

public-key post-quantum-cryptography

Feb 25 at 20:18 winstonhong 176

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

30 Bookmarks

Should we sign-then-encrypt, or encrypt-then-sign?

How should I calculate the entropy of a password?

In end-to-end encryption, doesn't the server need to be trusted?

Timing attack and good coding practices

Easy explanation of “IND-” security notions?

Why Curve25519 for encryption but Ed25519 for signatures?

What are recommended, general strategies to start block-cipher design and/or analysis?

AES-GCM Disadvantage

ECDSA, EdDSA and ed25519 relationship / compatibility

What are the odds of collisions for a hash function with 256-bit output?

Is a hash a zero-knowledge proof?

UMAC: to what extent is it in use today?

Why was the winner of the AES competition not a Feistel cipher?

How are points on an elliptic curve discretized?

How safe are Libsodium Crypto Boxes?

Relation between entropy and min-entropy

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

Security considerations on “expand 32-byte k”-magic number in the Salsa20 family of stream ciphers?

In search of a pedagogically simple example of asymmetric encryption routine?

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

Elliptic curve ed25519 vs ed448 - Differences

Why ECDSA has its form?

Curve25519 over Ed25519 for key exchange? Why?

Is forward secrecy overhyped or necessary?

What do NM-CPA, and NM-CCA mean?

Soft question: What are examples of beautiful proofs in cryptography? [closed]

Elliptic Curve Cryptography insecure when input does not lie on the curve?

How secure is ChaCha20? [closed]

How are these AES MixColumn multiplication tables calculated?

Transition to post-quantum cryptography