user avatar
user avatar
user avatar
knaccc
  • Member for 5 years, 4 months
  • Last seen this week
17 votes
1 answer
3k views

After ECDH with Curve25519, is it pointless to use anything stronger than AES-128?

8 votes
1 answer
302 views

Bob has an EC key pair. How can he receive a small integer in the least compute intensive way?

8 votes
2 answers
3k views

Why are NaCl secret keys 64 bytes for signing, but 32 bytes for box?

5 votes
1 answer
177 views

Can elliptic curve point common factors be detected?

5 votes
2 answers
179 views

EC: How to prevent discovery of base point after commutative operation

5 votes
1 answer
216 views

HKDF randomness extraction - salt or no salt?

4 votes
2 answers
859 views

Is it safe to generate two 256-bit ECC keys from 128 bits of entropy?

4 votes
1 answer
980 views

How to use a random 32 byte sequence as a curve25519 public key

3 votes
1 answer
222 views

Why do curve25519 implementations only have ge_frombytes_negate_vartime, and not a regular ge_frombytes method?

3 votes
0 answers
87 views

Which safe elliptic curves allow for the fastest scalar multiplication

3 votes
2 answers
253 views

How to prove that two EC public keys created with two different generators share the same secret key?

3 votes
2 answers
139 views

How to efficiently find the distance between two EC point private keys

2 votes
1 answer
71 views

Are the following asymmetric encryption schemes equivalent?

2 votes
1 answer
1k views

How to convert from curve25519 33 byte to 32 byte representation

1 vote
3 answers
1k views

How to deterministically generate a 256 bit ECC key from 128 bits of entropy without a CSPRNG

1 vote
1 answer
785 views

How many points are there on the X25519 curves?

1 vote
1 answer
239 views

Why is SHA384 used in TLS cipher suites for AES_256_GCM instead of SHA256?

1 vote
0 answers
33 views

Is partial computation of an Ed25519 Diffie-Hellman shared secret possible?

1 vote
1 answer
84 views

Would discrete-log-based signing and encryption have been a better choice than RSA?

1 vote
1 answer
119 views

How to most inexpensively extract 1 byte of uniformly distributed entropy from a 32-byte Curve25519 EC point

1 vote
1 answer
36 views

Necessary Schnorr signature non-interactive challenge bindings

0 votes
1 answer
906 views

Reasoning about WebCrypto ECDSA choices: P-256/384/521, SHA-1/256/384/512?

0 votes
1 answer
66 views

What is the term to describe the combination of ciphertext, IV and authentication tag?

0 votes
0 answers
36 views

Consequences of leaking one byte of an ECDH shared secret

0 votes
1 answer
343 views

Can TweetNaCl box sender's private key be set to "1" without privacy loss?