user avatar
user avatar
user avatar
A. Hersean
  • Member for 5 years, 8 months
  • Last seen this week
  • EU
221 votes
8 answers
104k views

How much would it cost in U.S. dollars to brute-force a 256-bit key in a year?

  • 2,313
137 votes
6 answers
98k views

Should we sign-then-encrypt, or encrypt-then-sign?

  • 5,278
114 votes
4 answers
75k views

How should I calculate the entropy of a password?

  • 1,887
86 votes
10 answers
17k views

In end-to-end encryption, doesn't the server need to be trusted?

  • 979
61 votes
1 answer
28k views

Easy explanation of "IND-" security notions?

  • 44.7k
55 votes
3 answers
24k views

Why Curve25519 for encryption but Ed25519 for signatures?

  • 651
54 votes
2 answers
12k views

Timing attack and good coding practices

  • 541
38 votes
4 answers
7k views

After 20 years of AES, what are the retrospective changes that should have been made?

  • 4,234
35 votes
2 answers
28k views

Is AES-256 a post-quantum secure cipher or not?

  • 367
34 votes
2 answers
5k views

What are recommended, general strategies to start block-cipher design and/or analysis?

  • 44.7k
34 votes
1 answer
14k views

ECDSA, EdDSA and ed25519 relationship / compatibility

30 votes
2 answers
6k views

AES-GCM Disadvantage

28 votes
4 answers
5k views

Why is FIPS 140-2 compliance controversial?

  • 407
26 votes
1 answer
6k views

Is a hash a zero-knowledge proof?

  • 398
25 votes
2 answers
9k views

Elliptic curve ed25519 vs ed448 - Differences

  • 2,109
24 votes
2 answers
6k views

Does the Balloon hashing paper deprecate Argon2?

  • 2,217
24 votes
1 answer
16k views

What are the odds of collisions for a hash function with 256-bit output?

  • 387
18 votes
2 answers
2k views

Why was the winner of the AES competition not a Feistel cipher?

  • 125k
18 votes
3 answers
3k views

UMAC: to what extent is it in use today?

13 votes
2 answers
9k views

How safe are Libsodium Crypto Boxes?

13 votes
3 answers
2k views

How are points on an elliptic curve discretized?

13 votes
1 answer
4k views

Security considerations on "expand 32-byte k"-magic number in the Salsa20 family of stream ciphers?

  • 233
12 votes
1 answer
4k views

Curve25519 over Ed25519 for key exchange? Why?

12 votes
1 answer
5k views

Relation between entropy and min-entropy

10 votes
7 answers
2k views

In search of a pedagogically simple example of asymmetric encryption routine?

10 votes
2 answers
424 views

What role plays Quantum Fourier Transformation in Shor's integer factorization algorithm?

  • 171
10 votes
1 answer
6k views

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

  • 403
9 votes
2 answers
867 views

What do NM-CPA and NM-CCA mean?

7 votes
2 answers
598 views

Why ECDSA has its form?

7 votes
9 answers
896 views

Soft question: What are examples of beautiful proofs in cryptography? [closed]

  • 1,297